@fusionauth/typescript-client 1.44.0 → 1.46.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -15,6 +15,7 @@
15
15
  * language governing permissions and limitations under the License.
16
16
  */
17
17
  Object.defineProperty(exports, "__esModule", { value: true });
18
+ exports.IdentityProviderLoginMethod = exports.ClientAuthenticationMethod = exports.OAuthErrorReason = exports.WebAuthnWorkflow = exports.Oauth2AuthorizedURLValidationPolicy = exports.LogoutBehavior = exports.RateLimitedRequestType = exports.CanonicalizationMethod = exports.SecureGeneratorType = exports.VerificationStrategy = exports.UniqueUsernameStrategy = exports.LDAPSecurityMethod = exports.TOTPAlgorithm = exports.EventType = exports.IdentityProviderType = exports.MessengerType = exports.ExpiryUnit = exports.EmailSecurityType = exports.ChangePasswordReason = exports.SteamAPIMode = exports.UserVerificationRequirement = exports.TransactionType = exports.FamilyRole = exports.KeyUse = exports.Algorithm = exports.EventLogType = exports.BreachAction = exports.IdentityProviderLinkingStrategy = exports.SAMLLogoutBehavior = exports.Sort = exports.OAuthErrorType = exports.LambdaEngineType = exports.UserActionPhase = exports.UnverifiedBehavior = exports.RefreshTokenExpirationPolicy = exports.RegistrationType = exports.LoginIdType = exports.CoseEllipticCurve = exports.AuthenticatorAttachment = exports.MultiFactorLoginPolicy = exports.ConnectorType = exports.KeyType = exports.AttestationType = exports.FormType = exports.KeyAlgorithm = exports.CaptchaMethod = exports.DeviceType = exports.RefreshTokenUsagePolicy = exports.ClientAuthenticationPolicy = exports.ResidentKeyRequirement = exports.AuthenticationThreats = exports.ObjectState = exports.AttestationConveyancePreference = exports.LambdaType = exports.CoseAlgorithmIdentifier = exports.HTTPMethod = exports.FormFieldAdminPolicy = exports.PublicKeyCredentialType = exports.SAMLv2DestinationAssertionPolicy = exports.CoseKeyType = exports.BreachMatchMode = exports.FormControl = exports.ContentStatus = exports.MessageType = exports.IPAccessControlEntryAction = exports.AuthenticatorAttachmentPreference = exports.XMLSignatureLocation = exports.TokenType = exports.ProofKeyForCodeExchangePolicy = exports.ReactorFeatureStatus = exports.GrantType = exports.UserState = exports.ApplicationMultiFactorTrustPolicy = exports.ConsentStatus = exports.BreachedPasswordStatus = exports.FormDataType = exports.FusionAuthClient = void 0;
18
19
  const DefaultRESTClientBuilder_1 = require("./DefaultRESTClientBuilder");
19
20
  const url_1 = require("url");
20
21
  class FusionAuthClient {
@@ -48,7 +49,7 @@ class FusionAuthClient {
48
49
  * Takes an action on a user. The user being actioned is called the "actionee" and the user taking the action is called the
49
50
  * "actioner". Both user ids are required in the request object.
50
51
  *
51
- * @param {ActionRequest} request The action request that includes all of the information about the action being taken including
52
+ * @param {ActionRequest} request The action request that includes all the information about the action being taken including
52
53
  * the id of the action, any options and the duration (if applicable).
53
54
  * @returns {Promise<ClientResponse<ActionResponse>>}
54
55
  */
@@ -87,6 +88,27 @@ class FusionAuthClient {
87
88
  .withMethod("PUT")
88
89
  .go();
89
90
  }
91
+ /**
92
+ * Approve a device grant.
93
+ *
94
+ * @param {string} client_id (Optional) The unique client identifier. The client Id is the Id of the FusionAuth Application in which you are attempting to authenticate.
95
+ * @param {string} client_secret (Optional) The client secret. This value will be required if client authentication is enabled.
96
+ * @param {string} token The access token used to identify the user.
97
+ * @param {string} user_code The end-user verification code.
98
+ * @returns {Promise<ClientResponse<DeviceApprovalResponse>>}
99
+ */
100
+ approveDevice(client_id, client_secret, token, user_code) {
101
+ let body = new url_1.URLSearchParams();
102
+ body.append('client_id', client_id);
103
+ body.append('client_secret', client_secret);
104
+ body.append('token', token);
105
+ body.append('user_code', user_code);
106
+ return this.start()
107
+ .withUri('/oauth2/device/approve')
108
+ .withFormData(body)
109
+ .withMethod("POST")
110
+ .go();
111
+ }
90
112
  /**
91
113
  * Cancels the user action.
92
114
  *
@@ -110,7 +132,7 @@ class FusionAuthClient {
110
132
  * the value in the request body.
111
133
  *
112
134
  * @param {string} changePasswordId The change password Id used to find the user. This value is generated by FusionAuth once the change password workflow has been initiated.
113
- * @param {ChangePasswordRequest} request The change password request that contains all of the information used to change the password.
135
+ * @param {ChangePasswordRequest} request The change password request that contains all the information used to change the password.
114
136
  * @returns {Promise<ClientResponse<ChangePasswordResponse>>}
115
137
  */
116
138
  changePassword(changePasswordId, request) {
@@ -126,7 +148,7 @@ class FusionAuthClient {
126
148
  * bypasses the email verification and allows a password to be changed directly without first calling the #forgotPassword
127
149
  * method.
128
150
  *
129
- * @param {ChangePasswordRequest} request The change password request that contains all of the information used to change the password.
151
+ * @param {ChangePasswordRequest} request The change password request that contains all the information used to change the password.
130
152
  * @returns {Promise<ClientResponse<void>>}
131
153
  */
132
154
  changePasswordByIdentity(request) {
@@ -190,8 +212,10 @@ class FusionAuthClient {
190
212
  /**
191
213
  * Make a Client Credentials grant request to obtain an access token.
192
214
  *
193
- * @param {string} client_id The client identifier. The client Id is the Id of the FusionAuth Entity in which you are attempting to authenticate.
194
- * @param {string} client_secret The client secret used to authenticate this request.
215
+ * @param {string} client_id (Optional) The client identifier. The client Id is the Id of the FusionAuth Entity in which you are attempting to authenticate.
216
+ * This parameter is optional when Basic Authorization is used to authenticate this request.
217
+ * @param {string} client_secret (Optional) The client secret used to authenticate this request.
218
+ * This parameter is optional when Basic Authorization is used to authenticate this request.
195
219
  * @param {string} scope (Optional) This parameter is used to indicate which target entity you are requesting access. To request access to an entity, use the format target-entity:&lt;target-entity-id&gt;:&lt;roles&gt;. Roles are an optional comma separated list.
196
220
  * @returns {Promise<ClientResponse<AccessToken>>}
197
221
  */
@@ -267,7 +291,7 @@ class FusionAuthClient {
267
291
  * If an API key is locked to a tenant, it can only create API Keys for that same tenant.
268
292
  *
269
293
  * @param {UUID} keyId (Optional) The unique Id of the API key. If not provided a secure random Id will be generated.
270
- * @param {APIKeyRequest} request The request object that contains all of the information needed to create the APIKey.
294
+ * @param {APIKeyRequest} request The request object that contains all the information needed to create the APIKey.
271
295
  * @returns {Promise<ClientResponse<APIKeyResponse>>}
272
296
  */
273
297
  createAPIKey(keyId, request) {
@@ -961,7 +985,7 @@ class FusionAuthClient {
961
985
  /**
962
986
  * Removes users as members of a group.
963
987
  *
964
- * @param {MemberDeleteRequest} request The member request that contains all of the information used to remove members to the group.
988
+ * @param {MemberDeleteRequest} request The member request that contains all the information used to remove members to the group.
965
989
  * @returns {Promise<ClientResponse<void>>}
966
990
  */
967
991
  deleteGroupMembers(request) {
@@ -1329,7 +1353,8 @@ class FusionAuthClient {
1329
1353
  * Makes a request to the Token endpoint to exchange the authorization code returned from the Authorize endpoint for an access token.
1330
1354
  *
1331
1355
  * @param {string} code The authorization code returned on the /oauth2/authorize response.
1332
- * @param {string} client_id The unique client identifier. The client Id is the Id of the FusionAuth Application in which you are attempting to authenticate.
1356
+ * @param {string} client_id (Optional) The unique client identifier. The client Id is the Id of the FusionAuth Application in which you are attempting to authenticate.
1357
+ * This parameter is optional when Basic Authorization is used to authenticate this request.
1333
1358
  * @param {string} client_secret (Optional) The client secret. This value will be required if client authentication is enabled.
1334
1359
  * @param {string} redirect_uri The URI to redirect to upon a successful request.
1335
1360
  * @returns {Promise<ClientResponse<AccessToken>>}
@@ -1353,6 +1378,7 @@ class FusionAuthClient {
1353
1378
  *
1354
1379
  * @param {string} code The authorization code returned on the /oauth2/authorize response.
1355
1380
  * @param {string} client_id (Optional) The unique client identifier. The client Id is the Id of the FusionAuth Application in which you are attempting to authenticate. This parameter is optional when the Authorization header is provided.
1381
+ * This parameter is optional when Basic Authorization is used to authenticate this request.
1356
1382
  * @param {string} client_secret (Optional) The client secret. This value may optionally be provided in the request body instead of the Authorization header.
1357
1383
  * @param {string} redirect_uri The URI to redirect to upon a successful request.
1358
1384
  * @param {string} code_verifier The random string generated previously. Will be compared with the code_challenge sent previously, which allows the OAuth provider to authenticate your app.
@@ -1378,6 +1404,7 @@ class FusionAuthClient {
1378
1404
  *
1379
1405
  * @param {string} refresh_token The refresh token that you would like to use to exchange for an access token.
1380
1406
  * @param {string} client_id (Optional) The unique client identifier. The client Id is the Id of the FusionAuth Application in which you are attempting to authenticate. This parameter is optional when the Authorization header is provided.
1407
+ * This parameter is optional when Basic Authorization is used to authenticate this request.
1381
1408
  * @param {string} client_secret (Optional) The client secret. This value may optionally be provided in the request body instead of the Authorization header.
1382
1409
  * @param {string} scope (Optional) This parameter is optional and if omitted, the same scope requested during the authorization request will be used. If provided the scopes must match those requested during the initial authorization request.
1383
1410
  * @param {string} user_code (Optional) The end-user verification code. This code is required if using this endpoint to approve the Device Authorization.
@@ -1417,6 +1444,7 @@ class FusionAuthClient {
1417
1444
  * @param {string} username The login identifier of the user. The login identifier can be either the email or the username.
1418
1445
  * @param {string} password The user’s password.
1419
1446
  * @param {string} client_id (Optional) The unique client identifier. The client Id is the Id of the FusionAuth Application in which you are attempting to authenticate. This parameter is optional when the Authorization header is provided.
1447
+ * This parameter is optional when Basic Authorization is used to authenticate this request.
1420
1448
  * @param {string} client_secret (Optional) The client secret. This value may optionally be provided in the request body instead of the Authorization header.
1421
1449
  * @param {string} scope (Optional) This parameter is optional and if omitted, the same scope requested during the authorization request will be used. If provided the scopes must match those requested during the initial authorization request.
1422
1450
  * @param {string} user_code (Optional) The end-user verification code. This code is required if using this endpoint to approve the Device Authorization.
@@ -1579,7 +1607,7 @@ class FusionAuthClient {
1579
1607
  * body with specific validation errors. This will slow the request down but will allow you to identify the cause of
1580
1608
  * the failure. See the validateDbConstraints request parameter.
1581
1609
  *
1582
- * @param {RefreshTokenImportRequest} request The request that contains all of the information about all of the refresh tokens to import.
1610
+ * @param {RefreshTokenImportRequest} request The request that contains all the information about all the refresh tokens to import.
1583
1611
  * @returns {Promise<ClientResponse<void>>}
1584
1612
  */
1585
1613
  importRefreshTokens(request) {
@@ -1599,7 +1627,7 @@ class FusionAuthClient {
1599
1627
  * body with specific validation errors. This will slow the request down but will allow you to identify the cause of the failure. See
1600
1628
  * the validateDbConstraints request parameter.
1601
1629
  *
1602
- * @param {ImportRequest} request The request that contains all of the information about all of the users to import.
1630
+ * @param {ImportRequest} request The request that contains all the information about all the users to import.
1603
1631
  * @returns {Promise<ClientResponse<void>>}
1604
1632
  */
1605
1633
  importUsers(request) {
@@ -1623,10 +1651,10 @@ class FusionAuthClient {
1623
1651
  .go();
1624
1652
  }
1625
1653
  /**
1626
- * Inspect an access token issued by FusionAuth.
1654
+ * Inspect an access token issued as the result of the User based grant such as the Authorization Code Grant, Implicit Grant, the User Credentials Grant or the Refresh Grant.
1627
1655
  *
1628
1656
  * @param {string} client_id The unique client identifier. The client Id is the Id of the FusionAuth Application for which this token was generated.
1629
- * @param {string} token The access token returned by this OAuth provider as the result of a successful authentication.
1657
+ * @param {string} token The access token returned by this OAuth provider as the result of a successful client credentials grant.
1630
1658
  * @returns {Promise<ClientResponse<IntrospectResponse>>}
1631
1659
  */
1632
1660
  introspectAccessToken(client_id, token) {
@@ -1639,6 +1667,21 @@ class FusionAuthClient {
1639
1667
  .withMethod("POST")
1640
1668
  .go();
1641
1669
  }
1670
+ /**
1671
+ * Inspect an access token issued as the result of the Client Credentials Grant.
1672
+ *
1673
+ * @param {string} token The access token returned by this OAuth provider as the result of a successful client credentials grant.
1674
+ * @returns {Promise<ClientResponse<IntrospectResponse>>}
1675
+ */
1676
+ introspectClientCredentialsAccessToken(token) {
1677
+ let body = new url_1.URLSearchParams();
1678
+ body.append('token', token);
1679
+ return this.startAnonymous()
1680
+ .withUri('/oauth2/introspect')
1681
+ .withFormData(body)
1682
+ .withMethod("POST")
1683
+ .go();
1684
+ }
1642
1685
  /**
1643
1686
  * Issue a new access token (JWT) for the requested Application after ensuring the provided JWT is valid. A valid
1644
1687
  * access token is properly signed and not expired.
@@ -1719,7 +1762,7 @@ class FusionAuthClient {
1719
1762
  * client and revoke the refresh token stored. This API does nothing if the request does not contain an access
1720
1763
  * token or refresh token cookies.
1721
1764
  *
1722
- * @param {boolean} global When this value is set to true all of the refresh tokens issued to the owner of the
1765
+ * @param {boolean} global When this value is set to true all the refresh tokens issued to the owner of the
1723
1766
  * provided token will be revoked.
1724
1767
  * @param {string} refreshToken (Optional) The refresh_token as a request parameter instead of coming in via a cookie.
1725
1768
  * If provided this takes precedence over the cookie.
@@ -1767,7 +1810,7 @@ class FusionAuthClient {
1767
1810
  * action.
1768
1811
  *
1769
1812
  * @param {UUID} actionId The Id of the action to modify. This is technically the user action log id.
1770
- * @param {ActionRequest} request The request that contains all of the information about the modification.
1813
+ * @param {ActionRequest} request The request that contains all the information about the modification.
1771
1814
  * @returns {Promise<ClientResponse<ActionResponse>>}
1772
1815
  */
1773
1816
  modifyAction(actionId, request) {
@@ -1781,7 +1824,7 @@ class FusionAuthClient {
1781
1824
  /**
1782
1825
  * Complete a login request using a passwordless code
1783
1826
  *
1784
- * @param {PasswordlessLoginRequest} request The passwordless login request that contains all of the information used to complete login.
1827
+ * @param {PasswordlessLoginRequest} request The passwordless login request that contains all the information used to complete login.
1785
1828
  * @returns {Promise<ClientResponse<LoginResponse>>}
1786
1829
  */
1787
1830
  passwordlessLogin(request) {
@@ -1795,7 +1838,7 @@ class FusionAuthClient {
1795
1838
  * Updates an authentication API key by given id
1796
1839
  *
1797
1840
  * @param {UUID} keyId The Id of the authentication key. If not provided a secure random api key will be generated.
1798
- * @param {APIKeyRequest} request The request object that contains all of the information needed to create the APIKey.
1841
+ * @param {APIKeyRequest} request The request object that contains all the information needed to create the APIKey.
1799
1842
  * @returns {Promise<ClientResponse<APIKeyResponse>>}
1800
1843
  */
1801
1844
  patchAPIKey(keyId, request) {
@@ -2364,7 +2407,7 @@ class FusionAuthClient {
2364
2407
  .go();
2365
2408
  }
2366
2409
  /**
2367
- * Retrieves the application for the given id or all of the applications if the id is null.
2410
+ * Retrieves the application for the given id or all the applications if the id is null.
2368
2411
  *
2369
2412
  * @param {UUID} applicationId (Optional) The application id.
2370
2413
  * @returns {Promise<ClientResponse<ApplicationResponse>>}
@@ -2467,7 +2510,7 @@ class FusionAuthClient {
2467
2510
  .go();
2468
2511
  }
2469
2512
  /**
2470
- * Retrieves the email template for the given Id. If you don't specify the id, this will return all of the email templates.
2513
+ * Retrieves the email template for the given Id. If you don't specify the id, this will return all the email templates.
2471
2514
  *
2472
2515
  * @param {UUID} emailTemplateId (Optional) The Id of the email template.
2473
2516
  * @returns {Promise<ClientResponse<EmailTemplateResponse>>}
@@ -2685,7 +2728,7 @@ class FusionAuthClient {
2685
2728
  .go();
2686
2729
  }
2687
2730
  /**
2688
- * Retrieves the identity provider for the given id or all of the identity providers if the id is null.
2731
+ * Retrieves the identity provider for the given id or all the identity providers if the id is null.
2689
2732
  *
2690
2733
  * @param {UUID} identityProviderId The identity provider Id.
2691
2734
  * @returns {Promise<ClientResponse<IdentityProviderResponse>>}
@@ -2901,7 +2944,7 @@ class FusionAuthClient {
2901
2944
  .go();
2902
2945
  }
2903
2946
  /**
2904
- * Retrieves the message template for the given Id. If you don't specify the id, this will return all of the message templates.
2947
+ * Retrieves the message template for the given Id. If you don't specify the id, this will return all the message templates.
2905
2948
  *
2906
2949
  * @param {UUID} messageTemplateId (Optional) The Id of the message template.
2907
2950
  * @returns {Promise<ClientResponse<MessageTemplateResponse>>}
@@ -3046,6 +3089,21 @@ class FusionAuthClient {
3046
3089
  .withMethod("GET")
3047
3090
  .go();
3048
3091
  }
3092
+ /**
3093
+ * Retrieve a pending identity provider link. This is useful to validate a pending link and retrieve meta-data about the identity provider link.
3094
+ *
3095
+ * @param {string} pendingLinkId The pending link Id.
3096
+ * @param {UUID} userId The optional userId. When provided additional meta-data will be provided to identify how many links if any the user already has.
3097
+ * @returns {Promise<ClientResponse<IdentityProviderPendingLinkResponse>>}
3098
+ */
3099
+ retrievePendingLink(pendingLinkId, userId) {
3100
+ return this.start()
3101
+ .withUri('/api/identity-provider/link/pending')
3102
+ .withUriSegment(pendingLinkId)
3103
+ .withParameter('userId', userId)
3104
+ .withMethod("GET")
3105
+ .go();
3106
+ }
3049
3107
  /**
3050
3108
  * Retrieves the FusionAuth Reactor metrics.
3051
3109
  *
@@ -3214,7 +3272,7 @@ class FusionAuthClient {
3214
3272
  .go();
3215
3273
  }
3216
3274
  /**
3217
- * Retrieves the totals report. This contains all of the total counts for each application and the global registration
3275
+ * Retrieves the totals report. This contains all the total counts for each application and the global registration
3218
3276
  * count.
3219
3277
  *
3220
3278
  * @returns {Promise<ClientResponse<TotalsReportResponse>>}
@@ -3272,7 +3330,7 @@ class FusionAuthClient {
3272
3330
  .go();
3273
3331
  }
3274
3332
  /**
3275
- * Retrieves the user action for the given Id. If you pass in null for the id, this will return all of the user
3333
+ * Retrieves the user action for the given Id. If you pass in null for the id, this will return all the user
3276
3334
  * actions.
3277
3335
  *
3278
3336
  * @param {UUID} userActionId (Optional) The Id of the user action.
@@ -3286,7 +3344,7 @@ class FusionAuthClient {
3286
3344
  .go();
3287
3345
  }
3288
3346
  /**
3289
- * Retrieves the user action reason for the given Id. If you pass in null for the id, this will return all of the user
3347
+ * Retrieves the user action reason for the given Id. If you pass in null for the id, this will return all the user
3290
3348
  * action reasons.
3291
3349
  *
3292
3350
  * @param {UUID} userActionReasonId (Optional) The Id of the user action reason.
@@ -3388,6 +3446,46 @@ class FusionAuthClient {
3388
3446
  .withMethod("GET")
3389
3447
  .go();
3390
3448
  }
3449
+ /**
3450
+ * Retrieve a user_code that is part of an in-progress Device Authorization Grant.
3451
+ *
3452
+ * This API is useful if you want to build your own login workflow to complete a device grant.
3453
+ *
3454
+ * @param {string} client_id The client id.
3455
+ * @param {string} client_secret The client id.
3456
+ * @param {string} user_code The end-user verification code.
3457
+ * @returns {Promise<ClientResponse<void>>}
3458
+ */
3459
+ retrieveUserCode(client_id, client_secret, user_code) {
3460
+ let body = new url_1.URLSearchParams();
3461
+ body.append('client_id', client_id);
3462
+ body.append('client_secret', client_secret);
3463
+ body.append('user_code', user_code);
3464
+ return this.startAnonymous()
3465
+ .withUri('/oauth2/device/user-code')
3466
+ .withFormData(body)
3467
+ .withMethod("GET")
3468
+ .go();
3469
+ }
3470
+ /**
3471
+ * Retrieve a user_code that is part of an in-progress Device Authorization Grant.
3472
+ *
3473
+ * This API is useful if you want to build your own login workflow to complete a device grant.
3474
+ *
3475
+ * This request will require an API key.
3476
+ *
3477
+ * @param {string} user_code The end-user verification code.
3478
+ * @returns {Promise<ClientResponse<void>>}
3479
+ */
3480
+ retrieveUserCodeUsingAPIKey(user_code) {
3481
+ let body = new url_1.URLSearchParams();
3482
+ body.append('user_code', user_code);
3483
+ return this.startAnonymous()
3484
+ .withUri('/oauth2/device/user-code')
3485
+ .withFormData(body)
3486
+ .withMethod("GET")
3487
+ .go();
3488
+ }
3391
3489
  /**
3392
3490
  * Retrieves all the comments for the user with the given Id.
3393
3491
  *
@@ -3431,7 +3529,7 @@ class FusionAuthClient {
3431
3529
  * Call the UserInfo endpoint to retrieve User Claims from the access token issued by FusionAuth.
3432
3530
  *
3433
3531
  * @param {string} encodedJWT The encoded JWT (access token).
3434
- * @returns {Promise<ClientResponse<UserResponse>>}
3532
+ * @returns {Promise<ClientResponse<UserinfoResponse>>}
3435
3533
  */
3436
3534
  retrieveUserInfoFromAccessToken(encodedJWT) {
3437
3535
  return this.startAnonymous()
@@ -3737,6 +3835,19 @@ class FusionAuthClient {
3737
3835
  .withMethod("DELETE")
3738
3836
  .go();
3739
3837
  }
3838
+ /**
3839
+ * Searches applications with the specified criteria and pagination.
3840
+ *
3841
+ * @param {ApplicationSearchRequest} request The search criteria and pagination information.
3842
+ * @returns {Promise<ClientResponse<ApplicationSearchResponse>>}
3843
+ */
3844
+ searchApplications(request) {
3845
+ return this.start()
3846
+ .withUri('/api/application/search')
3847
+ .withJSONBody(request)
3848
+ .withMethod("POST")
3849
+ .go();
3850
+ }
3740
3851
  /**
3741
3852
  * Searches the audit logs with the specified criteria and pagination.
3742
3853
  *
@@ -3750,6 +3861,32 @@ class FusionAuthClient {
3750
3861
  .withMethod("POST")
3751
3862
  .go();
3752
3863
  }
3864
+ /**
3865
+ * Searches consents with the specified criteria and pagination.
3866
+ *
3867
+ * @param {ConsentSearchRequest} request The search criteria and pagination information.
3868
+ * @returns {Promise<ClientResponse<ConsentSearchResponse>>}
3869
+ */
3870
+ searchConsents(request) {
3871
+ return this.start()
3872
+ .withUri('/api/consent/search')
3873
+ .withJSONBody(request)
3874
+ .withMethod("POST")
3875
+ .go();
3876
+ }
3877
+ /**
3878
+ * Searches email templates with the specified criteria and pagination.
3879
+ *
3880
+ * @param {EmailTemplateSearchRequest} request The search criteria and pagination information.
3881
+ * @returns {Promise<ClientResponse<EmailTemplateSearchResponse>>}
3882
+ */
3883
+ searchEmailTemplates(request) {
3884
+ return this.start()
3885
+ .withUri('/api/email/template/search')
3886
+ .withJSONBody(request)
3887
+ .withMethod("POST")
3888
+ .go();
3889
+ }
3753
3890
  /**
3754
3891
  * Searches entities with the specified criteria and pagination.
3755
3892
  *
@@ -3854,6 +3991,45 @@ class FusionAuthClient {
3854
3991
  .withMethod("POST")
3855
3992
  .go();
3856
3993
  }
3994
+ /**
3995
+ * Searches identity providers with the specified criteria and pagination.
3996
+ *
3997
+ * @param {IdentityProviderSearchRequest} request The search criteria and pagination information.
3998
+ * @returns {Promise<ClientResponse<IdentityProviderSearchResponse>>}
3999
+ */
4000
+ searchIdentityProviders(request) {
4001
+ return this.start()
4002
+ .withUri('/api/identity-provider/search')
4003
+ .withJSONBody(request)
4004
+ .withMethod("POST")
4005
+ .go();
4006
+ }
4007
+ /**
4008
+ * Searches keys with the specified criteria and pagination.
4009
+ *
4010
+ * @param {KeySearchRequest} request The search criteria and pagination information.
4011
+ * @returns {Promise<ClientResponse<KeySearchResponse>>}
4012
+ */
4013
+ searchKeys(request) {
4014
+ return this.start()
4015
+ .withUri('/api/key/search')
4016
+ .withJSONBody(request)
4017
+ .withMethod("POST")
4018
+ .go();
4019
+ }
4020
+ /**
4021
+ * Searches lambdas with the specified criteria and pagination.
4022
+ *
4023
+ * @param {LambdaSearchRequest} request The search criteria and pagination information.
4024
+ * @returns {Promise<ClientResponse<LambdaSearchResponse>>}
4025
+ */
4026
+ searchLambdas(request) {
4027
+ return this.start()
4028
+ .withUri('/api/lambda/search')
4029
+ .withJSONBody(request)
4030
+ .withMethod("POST")
4031
+ .go();
4032
+ }
3857
4033
  /**
3858
4034
  * Searches the login records with the specified criteria and pagination.
3859
4035
  *
@@ -3867,6 +4043,45 @@ class FusionAuthClient {
3867
4043
  .withMethod("POST")
3868
4044
  .go();
3869
4045
  }
4046
+ /**
4047
+ * Searches tenants with the specified criteria and pagination.
4048
+ *
4049
+ * @param {TenantSearchRequest} request The search criteria and pagination information.
4050
+ * @returns {Promise<ClientResponse<TenantSearchResponse>>}
4051
+ */
4052
+ searchTenants(request) {
4053
+ return this.start()
4054
+ .withUri('/api/tenant/search')
4055
+ .withJSONBody(request)
4056
+ .withMethod("POST")
4057
+ .go();
4058
+ }
4059
+ /**
4060
+ * Searches themes with the specified criteria and pagination.
4061
+ *
4062
+ * @param {ThemeSearchRequest} request The search criteria and pagination information.
4063
+ * @returns {Promise<ClientResponse<ThemeSearchResponse>>}
4064
+ */
4065
+ searchThemes(request) {
4066
+ return this.start()
4067
+ .withUri('/api/theme/search')
4068
+ .withJSONBody(request)
4069
+ .withMethod("POST")
4070
+ .go();
4071
+ }
4072
+ /**
4073
+ * Searches user comments with the specified criteria and pagination.
4074
+ *
4075
+ * @param {UserCommentSearchRequest} request The search criteria and pagination information.
4076
+ * @returns {Promise<ClientResponse<UserCommentSearchResponse>>}
4077
+ */
4078
+ searchUserComments(request) {
4079
+ return this.start()
4080
+ .withUri('/api/user/comment/search')
4081
+ .withJSONBody(request)
4082
+ .withMethod("POST")
4083
+ .go();
4084
+ }
3870
4085
  /**
3871
4086
  * Retrieves the users for the given ids. If any id is invalid, it is ignored.
3872
4087
  *
@@ -3925,12 +4140,25 @@ class FusionAuthClient {
3925
4140
  .withMethod("POST")
3926
4141
  .go();
3927
4142
  }
4143
+ /**
4144
+ * Searches webhooks with the specified criteria and pagination.
4145
+ *
4146
+ * @param {WebhookSearchRequest} request The search criteria and pagination information.
4147
+ * @returns {Promise<ClientResponse<WebhookSearchResponse>>}
4148
+ */
4149
+ searchWebhooks(request) {
4150
+ return this.start()
4151
+ .withUri('/api/webhook/search')
4152
+ .withJSONBody(request)
4153
+ .withMethod("POST")
4154
+ .go();
4155
+ }
3928
4156
  /**
3929
4157
  * Send an email using an email template id. You can optionally provide <code>requestData</code> to access key value
3930
4158
  * pairs in the email template.
3931
4159
  *
3932
4160
  * @param {UUID} emailTemplateId The id for the template.
3933
- * @param {SendRequest} request The send email request that contains all of the information used to send the email.
4161
+ * @param {SendRequest} request The send email request that contains all the information used to send the email.
3934
4162
  * @returns {Promise<ClientResponse<SendResponse>>}
3935
4163
  */
3936
4164
  sendEmail(emailTemplateId, request) {
@@ -3957,7 +4185,7 @@ class FusionAuthClient {
3957
4185
  /**
3958
4186
  * Send a passwordless authentication code in an email to complete login.
3959
4187
  *
3960
- * @param {PasswordlessSendRequest} request The passwordless send request that contains all of the information used to send an email containing a code.
4188
+ * @param {PasswordlessSendRequest} request The passwordless send request that contains all the information used to send an email containing a code.
3961
4189
  * @returns {Promise<ClientResponse<void>>}
3962
4190
  */
3963
4191
  sendPasswordlessCode(request) {
@@ -4015,7 +4243,7 @@ class FusionAuthClient {
4015
4243
  * Send a Two Factor authentication code to allow the completion of Two Factor authentication.
4016
4244
  *
4017
4245
  * @param {string} twoFactorId The Id returned by the Login API necessary to complete Two Factor authentication.
4018
- * @param {TwoFactorSendRequest} request The Two Factor send request that contains all of the information used to send the Two Factor code to the user.
4246
+ * @param {TwoFactorSendRequest} request The Two Factor send request that contains all the information used to send the Two Factor code to the user.
4019
4247
  * @returns {Promise<ClientResponse<void>>}
4020
4248
  */
4021
4249
  sendTwoFactorCodeForLoginUsingMethod(twoFactorId, request) {
@@ -4044,7 +4272,7 @@ class FusionAuthClient {
4044
4272
  * Start a passwordless login request by generating a passwordless code. This code can be sent to the User using the Send
4045
4273
  * Passwordless Code API or using a mechanism outside of FusionAuth. The passwordless login is completed by using the Passwordless Login API with this code.
4046
4274
  *
4047
- * @param {PasswordlessStartRequest} request The passwordless start request that contains all of the information used to begin the passwordless login request.
4275
+ * @param {PasswordlessStartRequest} request The passwordless start request that contains all the information used to begin the passwordless login request.
4048
4276
  * @returns {Promise<ClientResponse<PasswordlessStartResponse>>}
4049
4277
  */
4050
4278
  startPasswordlessLogin(request) {
@@ -4060,9 +4288,9 @@ class FusionAuthClient {
4060
4288
  * to send the code out-of-band. The Two-Factor login is completed by making a request to the Two-Factor Login
4061
4289
  * API (/api/two-factor/login). with the two-factor identifier and the one-time use code.
4062
4290
  *
4063
- * This API is intended to allow you to begin a Two-Factor login outside of a normal login that originated from the Login API (/api/login).
4291
+ * This API is intended to allow you to begin a Two-Factor login outside a normal login that originated from the Login API (/api/login).
4064
4292
  *
4065
- * @param {TwoFactorStartRequest} request The Two-Factor start request that contains all of the information used to begin the Two-Factor login request.
4293
+ * @param {TwoFactorStartRequest} request The Two-Factor start request that contains all the information used to begin the Two-Factor login request.
4066
4294
  * @returns {Promise<ClientResponse<TwoFactorStartResponse>>}
4067
4295
  */
4068
4296
  startTwoFactorLogin(request) {
@@ -4130,7 +4358,7 @@ class FusionAuthClient {
4130
4358
  * Updates the application with the given Id.
4131
4359
  *
4132
4360
  * @param {UUID} applicationId The Id of the application to update.
4133
- * @param {ApplicationRequest} request The request that contains all of the new application information.
4361
+ * @param {ApplicationRequest} request The request that contains all the new application information.
4134
4362
  * @returns {Promise<ClientResponse<ApplicationResponse>>}
4135
4363
  */
4136
4364
  updateApplication(applicationId, request) {
@@ -4146,7 +4374,7 @@ class FusionAuthClient {
4146
4374
  *
4147
4375
  * @param {UUID} applicationId The Id of the application that the role belongs to.
4148
4376
  * @param {UUID} roleId The Id of the role to update.
4149
- * @param {ApplicationRequest} request The request that contains all of the new role information.
4377
+ * @param {ApplicationRequest} request The request that contains all the new role information.
4150
4378
  * @returns {Promise<ClientResponse<ApplicationResponse>>}
4151
4379
  */
4152
4380
  updateApplicationRole(applicationId, roleId, request) {
@@ -4163,7 +4391,7 @@ class FusionAuthClient {
4163
4391
  * Updates the connector with the given Id.
4164
4392
  *
4165
4393
  * @param {UUID} connectorId The Id of the connector to update.
4166
- * @param {ConnectorRequest} request The request object that contains all of the new connector information.
4394
+ * @param {ConnectorRequest} request The request object that contains all the new connector information.
4167
4395
  * @returns {Promise<ClientResponse<ConnectorResponse>>}
4168
4396
  */
4169
4397
  updateConnector(connectorId, request) {
@@ -4178,7 +4406,7 @@ class FusionAuthClient {
4178
4406
  * Updates the consent with the given Id.
4179
4407
  *
4180
4408
  * @param {UUID} consentId The Id of the consent to update.
4181
- * @param {ConsentRequest} request The request that contains all of the new consent information.
4409
+ * @param {ConsentRequest} request The request that contains all the new consent information.
4182
4410
  * @returns {Promise<ClientResponse<ConsentResponse>>}
4183
4411
  */
4184
4412
  updateConsent(consentId, request) {
@@ -4193,7 +4421,7 @@ class FusionAuthClient {
4193
4421
  * Updates the email template with the given Id.
4194
4422
  *
4195
4423
  * @param {UUID} emailTemplateId The Id of the email template to update.
4196
- * @param {EmailTemplateRequest} request The request that contains all of the new email template information.
4424
+ * @param {EmailTemplateRequest} request The request that contains all the new email template information.
4197
4425
  * @returns {Promise<ClientResponse<EmailTemplateResponse>>}
4198
4426
  */
4199
4427
  updateEmailTemplate(emailTemplateId, request) {
@@ -4208,7 +4436,7 @@ class FusionAuthClient {
4208
4436
  * Updates the Entity with the given Id.
4209
4437
  *
4210
4438
  * @param {UUID} entityId The Id of the Entity to update.
4211
- * @param {EntityRequest} request The request that contains all of the new Entity information.
4439
+ * @param {EntityRequest} request The request that contains all the new Entity information.
4212
4440
  * @returns {Promise<ClientResponse<EntityResponse>>}
4213
4441
  */
4214
4442
  updateEntity(entityId, request) {
@@ -4223,7 +4451,7 @@ class FusionAuthClient {
4223
4451
  * Updates the Entity Type with the given Id.
4224
4452
  *
4225
4453
  * @param {UUID} entityTypeId The Id of the Entity Type to update.
4226
- * @param {EntityTypeRequest} request The request that contains all of the new Entity Type information.
4454
+ * @param {EntityTypeRequest} request The request that contains all the new Entity Type information.
4227
4455
  * @returns {Promise<ClientResponse<EntityTypeResponse>>}
4228
4456
  */
4229
4457
  updateEntityType(entityTypeId, request) {
@@ -4239,7 +4467,7 @@ class FusionAuthClient {
4239
4467
  *
4240
4468
  * @param {UUID} entityTypeId The Id of the entityType that the permission belongs to.
4241
4469
  * @param {UUID} permissionId The Id of the permission to update.
4242
- * @param {EntityTypeRequest} request The request that contains all of the new permission information.
4470
+ * @param {EntityTypeRequest} request The request that contains all the new permission information.
4243
4471
  * @returns {Promise<ClientResponse<EntityTypeResponse>>}
4244
4472
  */
4245
4473
  updateEntityTypePermission(entityTypeId, permissionId, request) {
@@ -4256,7 +4484,7 @@ class FusionAuthClient {
4256
4484
  * Updates the form with the given Id.
4257
4485
  *
4258
4486
  * @param {UUID} formId The Id of the form to update.
4259
- * @param {FormRequest} request The request object that contains all of the new form information.
4487
+ * @param {FormRequest} request The request object that contains all the new form information.
4260
4488
  * @returns {Promise<ClientResponse<FormResponse>>}
4261
4489
  */
4262
4490
  updateForm(formId, request) {
@@ -4271,7 +4499,7 @@ class FusionAuthClient {
4271
4499
  * Updates the form field with the given Id.
4272
4500
  *
4273
4501
  * @param {UUID} fieldId The Id of the form field to update.
4274
- * @param {FormFieldRequest} request The request object that contains all of the new form field information.
4502
+ * @param {FormFieldRequest} request The request object that contains all the new form field information.
4275
4503
  * @returns {Promise<ClientResponse<FormFieldResponse>>}
4276
4504
  */
4277
4505
  updateFormField(fieldId, request) {
@@ -4286,7 +4514,7 @@ class FusionAuthClient {
4286
4514
  * Updates the group with the given Id.
4287
4515
  *
4288
4516
  * @param {UUID} groupId The Id of the group to update.
4289
- * @param {GroupRequest} request The request that contains all of the new group information.
4517
+ * @param {GroupRequest} request The request that contains all the new group information.
4290
4518
  * @returns {Promise<ClientResponse<GroupResponse>>}
4291
4519
  */
4292
4520
  updateGroup(groupId, request) {
@@ -4314,7 +4542,7 @@ class FusionAuthClient {
4314
4542
  * Updates the IP Access Control List with the given Id.
4315
4543
  *
4316
4544
  * @param {UUID} accessControlListId The Id of the IP Access Control List to update.
4317
- * @param {IPAccessControlListRequest} request The request that contains all of the new IP Access Control List information.
4545
+ * @param {IPAccessControlListRequest} request The request that contains all the new IP Access Control List information.
4318
4546
  * @returns {Promise<ClientResponse<IPAccessControlListResponse>>}
4319
4547
  */
4320
4548
  updateIPAccessControlList(accessControlListId, request) {
@@ -4343,7 +4571,7 @@ class FusionAuthClient {
4343
4571
  /**
4344
4572
  * Updates the available integrations.
4345
4573
  *
4346
- * @param {IntegrationRequest} request The request that contains all of the new integration information.
4574
+ * @param {IntegrationRequest} request The request that contains all the new integration information.
4347
4575
  * @returns {Promise<ClientResponse<IntegrationResponse>>}
4348
4576
  */
4349
4577
  updateIntegrations(request) {
@@ -4357,7 +4585,7 @@ class FusionAuthClient {
4357
4585
  * Updates the key with the given Id.
4358
4586
  *
4359
4587
  * @param {UUID} keyId The Id of the key to update.
4360
- * @param {KeyRequest} request The request that contains all of the new key information.
4588
+ * @param {KeyRequest} request The request that contains all the new key information.
4361
4589
  * @returns {Promise<ClientResponse<KeyResponse>>}
4362
4590
  */
4363
4591
  updateKey(keyId, request) {
@@ -4372,7 +4600,7 @@ class FusionAuthClient {
4372
4600
  * Updates the lambda with the given Id.
4373
4601
  *
4374
4602
  * @param {UUID} lambdaId The Id of the lambda to update.
4375
- * @param {LambdaRequest} request The request that contains all of the new lambda information.
4603
+ * @param {LambdaRequest} request The request that contains all the new lambda information.
4376
4604
  * @returns {Promise<ClientResponse<LambdaResponse>>}
4377
4605
  */
4378
4606
  updateLambda(lambdaId, request) {
@@ -4387,7 +4615,7 @@ class FusionAuthClient {
4387
4615
  * Updates the message template with the given Id.
4388
4616
  *
4389
4617
  * @param {UUID} messageTemplateId The Id of the message template to update.
4390
- * @param {MessageTemplateRequest} request The request that contains all of the new message template information.
4618
+ * @param {MessageTemplateRequest} request The request that contains all the new message template information.
4391
4619
  * @returns {Promise<ClientResponse<MessageTemplateResponse>>}
4392
4620
  */
4393
4621
  updateMessageTemplate(messageTemplateId, request) {
@@ -4402,7 +4630,7 @@ class FusionAuthClient {
4402
4630
  * Updates the messenger with the given Id.
4403
4631
  *
4404
4632
  * @param {UUID} messengerId The Id of the messenger to update.
4405
- * @param {MessengerRequest} request The request object that contains all of the new messenger information.
4633
+ * @param {MessengerRequest} request The request object that contains all the new messenger information.
4406
4634
  * @returns {Promise<ClientResponse<MessengerResponse>>}
4407
4635
  */
4408
4636
  updateMessenger(messengerId, request) {
@@ -4417,7 +4645,7 @@ class FusionAuthClient {
4417
4645
  * Updates the registration for the user with the given id and the application defined in the request.
4418
4646
  *
4419
4647
  * @param {UUID} userId The Id of the user whose registration is going to be updated.
4420
- * @param {RegistrationRequest} request The request that contains all of the new registration information.
4648
+ * @param {RegistrationRequest} request The request that contains all the new registration information.
4421
4649
  * @returns {Promise<ClientResponse<RegistrationResponse>>}
4422
4650
  */
4423
4651
  updateRegistration(userId, request) {
@@ -4431,7 +4659,7 @@ class FusionAuthClient {
4431
4659
  /**
4432
4660
  * Updates the system configuration.
4433
4661
  *
4434
- * @param {SystemConfigurationRequest} request The request that contains all of the new system configuration information.
4662
+ * @param {SystemConfigurationRequest} request The request that contains all the new system configuration information.
4435
4663
  * @returns {Promise<ClientResponse<SystemConfigurationResponse>>}
4436
4664
  */
4437
4665
  updateSystemConfiguration(request) {
@@ -4445,7 +4673,7 @@ class FusionAuthClient {
4445
4673
  * Updates the tenant with the given Id.
4446
4674
  *
4447
4675
  * @param {UUID} tenantId The Id of the tenant to update.
4448
- * @param {TenantRequest} request The request that contains all of the new tenant information.
4676
+ * @param {TenantRequest} request The request that contains all the new tenant information.
4449
4677
  * @returns {Promise<ClientResponse<TenantResponse>>}
4450
4678
  */
4451
4679
  updateTenant(tenantId, request) {
@@ -4460,7 +4688,7 @@ class FusionAuthClient {
4460
4688
  * Updates the theme with the given Id.
4461
4689
  *
4462
4690
  * @param {UUID} themeId The Id of the theme to update.
4463
- * @param {ThemeRequest} request The request that contains all of the new theme information.
4691
+ * @param {ThemeRequest} request The request that contains all the new theme information.
4464
4692
  * @returns {Promise<ClientResponse<ThemeResponse>>}
4465
4693
  */
4466
4694
  updateTheme(themeId, request) {
@@ -4475,7 +4703,7 @@ class FusionAuthClient {
4475
4703
  * Updates the user with the given Id.
4476
4704
  *
4477
4705
  * @param {UUID} userId The Id of the user to update.
4478
- * @param {UserRequest} request The request that contains all of the new user information.
4706
+ * @param {UserRequest} request The request that contains all the new user information.
4479
4707
  * @returns {Promise<ClientResponse<UserResponse>>}
4480
4708
  */
4481
4709
  updateUser(userId, request) {
@@ -4490,7 +4718,7 @@ class FusionAuthClient {
4490
4718
  * Updates the user action with the given Id.
4491
4719
  *
4492
4720
  * @param {UUID} userActionId The Id of the user action to update.
4493
- * @param {UserActionRequest} request The request that contains all of the new user action information.
4721
+ * @param {UserActionRequest} request The request that contains all the new user action information.
4494
4722
  * @returns {Promise<ClientResponse<UserActionResponse>>}
4495
4723
  */
4496
4724
  updateUserAction(userActionId, request) {
@@ -4505,7 +4733,7 @@ class FusionAuthClient {
4505
4733
  * Updates the user action reason with the given Id.
4506
4734
  *
4507
4735
  * @param {UUID} userActionReasonId The Id of the user action reason to update.
4508
- * @param {UserActionReasonRequest} request The request that contains all of the new user action reason information.
4736
+ * @param {UserActionReasonRequest} request The request that contains all the new user action reason information.
4509
4737
  * @returns {Promise<ClientResponse<UserActionReasonResponse>>}
4510
4738
  */
4511
4739
  updateUserActionReason(userActionReasonId, request) {
@@ -4535,7 +4763,7 @@ class FusionAuthClient {
4535
4763
  * Updates the webhook with the given Id.
4536
4764
  *
4537
4765
  * @param {UUID} webhookId The Id of the webhook to update.
4538
- * @param {WebhookRequest} request The request that contains all of the new webhook information.
4766
+ * @param {WebhookRequest} request The request that contains all the new webhook information.
4539
4767
  * @returns {Promise<ClientResponse<WebhookResponse>>}
4540
4768
  */
4541
4769
  updateWebhook(webhookId, request) {
@@ -4605,7 +4833,7 @@ class FusionAuthClient {
4605
4833
  * If a TTL is not provided in the request, the TTL will be retrieved from the default Tenant or the Tenant specified on the request either
4606
4834
  * by way of the X-FusionAuth-TenantId request header, or a tenant scoped API key.
4607
4835
  *
4608
- * @param {JWTVendRequest} request The request that contains all of the claims for this JWT.
4836
+ * @param {JWTVendRequest} request The request that contains all the claims for this JWT.
4609
4837
  * @returns {Promise<ClientResponse<JWTVendResponse>>}
4610
4838
  */
4611
4839
  vendJWT(request) {
@@ -4725,26 +4953,38 @@ class FusionAuthClient {
4725
4953
  exports.FusionAuthClient = FusionAuthClient;
4726
4954
  exports.default = FusionAuthClient;
4727
4955
  /**
4728
- * Available JSON Web Algorithms (JWA) as described in RFC 7518 available for this JWT implementation.
4956
+ * @author Daniel DeGroff
4957
+ */
4958
+ var FormDataType;
4959
+ (function (FormDataType) {
4960
+ FormDataType["bool"] = "bool";
4961
+ FormDataType["consent"] = "consent";
4962
+ FormDataType["date"] = "date";
4963
+ FormDataType["email"] = "email";
4964
+ FormDataType["number"] = "number";
4965
+ FormDataType["string"] = "string";
4966
+ })(FormDataType = exports.FormDataType || (exports.FormDataType = {}));
4967
+ /**
4968
+ * @author Daniel DeGroff
4969
+ */
4970
+ var BreachedPasswordStatus;
4971
+ (function (BreachedPasswordStatus) {
4972
+ BreachedPasswordStatus["None"] = "None";
4973
+ BreachedPasswordStatus["ExactMatch"] = "ExactMatch";
4974
+ BreachedPasswordStatus["SubAddressMatch"] = "SubAddressMatch";
4975
+ BreachedPasswordStatus["PasswordOnly"] = "PasswordOnly";
4976
+ BreachedPasswordStatus["CommonPassword"] = "CommonPassword";
4977
+ })(BreachedPasswordStatus = exports.BreachedPasswordStatus || (exports.BreachedPasswordStatus = {}));
4978
+ /**
4979
+ * Models a consent.
4729
4980
  *
4730
4981
  * @author Daniel DeGroff
4731
4982
  */
4732
- var Algorithm;
4733
- (function (Algorithm) {
4734
- Algorithm["ES256"] = "ES256";
4735
- Algorithm["ES384"] = "ES384";
4736
- Algorithm["ES512"] = "ES512";
4737
- Algorithm["HS256"] = "HS256";
4738
- Algorithm["HS384"] = "HS384";
4739
- Algorithm["HS512"] = "HS512";
4740
- Algorithm["PS256"] = "PS256";
4741
- Algorithm["PS384"] = "PS384";
4742
- Algorithm["PS512"] = "PS512";
4743
- Algorithm["RS256"] = "RS256";
4744
- Algorithm["RS384"] = "RS384";
4745
- Algorithm["RS512"] = "RS512";
4746
- Algorithm["none"] = "none";
4747
- })(Algorithm = exports.Algorithm || (exports.Algorithm = {}));
4983
+ var ConsentStatus;
4984
+ (function (ConsentStatus) {
4985
+ ConsentStatus["Active"] = "Active";
4986
+ ConsentStatus["Revoked"] = "Revoked";
4987
+ })(ConsentStatus = exports.ConsentStatus || (exports.ConsentStatus = {}));
4748
4988
  /**
4749
4989
  * @author Daniel DeGroff
4750
4990
  */
@@ -4755,47 +4995,75 @@ var ApplicationMultiFactorTrustPolicy;
4755
4995
  ApplicationMultiFactorTrustPolicy["None"] = "None";
4756
4996
  })(ApplicationMultiFactorTrustPolicy = exports.ApplicationMultiFactorTrustPolicy || (exports.ApplicationMultiFactorTrustPolicy = {}));
4757
4997
  /**
4758
- * Used to communicate whether and how authenticator attestation should be delivered to the Relying Party
4759
- *
4760
- * @author Spencer Witt
4998
+ * @author Daniel DeGroff
4761
4999
  */
4762
- var AttestationConveyancePreference;
4763
- (function (AttestationConveyancePreference) {
4764
- AttestationConveyancePreference["none"] = "none";
4765
- AttestationConveyancePreference["indirect"] = "indirect";
4766
- AttestationConveyancePreference["direct"] = "direct";
4767
- AttestationConveyancePreference["enterprise"] = "enterprise";
4768
- })(AttestationConveyancePreference = exports.AttestationConveyancePreference || (exports.AttestationConveyancePreference = {}));
5000
+ var UserState;
5001
+ (function (UserState) {
5002
+ UserState["Authenticated"] = "Authenticated";
5003
+ UserState["AuthenticatedNotRegistered"] = "AuthenticatedNotRegistered";
5004
+ UserState["AuthenticatedNotVerified"] = "AuthenticatedNotVerified";
5005
+ UserState["AuthenticatedRegistrationNotVerified"] = "AuthenticatedRegistrationNotVerified";
5006
+ })(UserState = exports.UserState || (exports.UserState = {}));
4769
5007
  /**
4770
- * Used to indicate what type of attestation was included in the authenticator response for a given WebAuthn credential at the time it was created
5008
+ * Authorization Grant types as defined by the <a href="https://tools.ietf.org/html/rfc6749">The OAuth 2.0 Authorization
5009
+ * Framework - RFC 6749</a>.
5010
+ * <p>
5011
+ * Specific names as defined by <a href="https://tools.ietf.org/html/rfc7591#section-4.1">
5012
+ * OAuth 2.0 Dynamic Client Registration Protocol - RFC 7591 Section 4.1</a>
4771
5013
  *
4772
- * @author Spencer Witt
5014
+ * @author Daniel DeGroff
4773
5015
  */
4774
- var AttestationType;
4775
- (function (AttestationType) {
4776
- AttestationType["basic"] = "basic";
4777
- AttestationType["self"] = "self";
4778
- AttestationType["attestationCa"] = "attestationCa";
4779
- AttestationType["anonymizationCa"] = "anonymizationCa";
4780
- AttestationType["none"] = "none";
4781
- })(AttestationType = exports.AttestationType || (exports.AttestationType = {}));
5016
+ var GrantType;
5017
+ (function (GrantType) {
5018
+ GrantType["authorization_code"] = "authorization_code";
5019
+ GrantType["implicit"] = "implicit";
5020
+ GrantType["password"] = "password";
5021
+ GrantType["client_credentials"] = "client_credentials";
5022
+ GrantType["refresh_token"] = "refresh_token";
5023
+ GrantType["unknown"] = "unknown";
5024
+ GrantType["device_code"] = "urn:ietf:params:oauth:grant-type:device_code";
5025
+ })(GrantType = exports.GrantType || (exports.GrantType = {}));
4782
5026
  /**
4783
- * @author Brett Pontarelli
5027
+ * @author Brian Pontarelli
4784
5028
  */
4785
- var AuthenticationThreats;
4786
- (function (AuthenticationThreats) {
4787
- AuthenticationThreats["ImpossibleTravel"] = "ImpossibleTravel";
4788
- })(AuthenticationThreats = exports.AuthenticationThreats || (exports.AuthenticationThreats = {}));
5029
+ var ReactorFeatureStatus;
5030
+ (function (ReactorFeatureStatus) {
5031
+ ReactorFeatureStatus["ACTIVE"] = "ACTIVE";
5032
+ ReactorFeatureStatus["DISCONNECTED"] = "DISCONNECTED";
5033
+ ReactorFeatureStatus["PENDING"] = "PENDING";
5034
+ ReactorFeatureStatus["DISABLED"] = "DISABLED";
5035
+ ReactorFeatureStatus["UNKNOWN"] = "UNKNOWN";
5036
+ })(ReactorFeatureStatus = exports.ReactorFeatureStatus || (exports.ReactorFeatureStatus = {}));
4789
5037
  /**
4790
- * Describes the <a href="https://www.w3.org/TR/webauthn-2/#authenticator-attachment-modality">authenticator attachment modality</a>.
4791
- *
4792
- * @author Spencer Witt
5038
+ * @author Brett Guy
4793
5039
  */
4794
- var AuthenticatorAttachment;
4795
- (function (AuthenticatorAttachment) {
4796
- AuthenticatorAttachment["platform"] = "platform";
4797
- AuthenticatorAttachment["crossPlatform"] = "crossPlatform";
4798
- })(AuthenticatorAttachment = exports.AuthenticatorAttachment || (exports.AuthenticatorAttachment = {}));
5040
+ var ProofKeyForCodeExchangePolicy;
5041
+ (function (ProofKeyForCodeExchangePolicy) {
5042
+ ProofKeyForCodeExchangePolicy["Required"] = "Required";
5043
+ ProofKeyForCodeExchangePolicy["NotRequired"] = "NotRequired";
5044
+ ProofKeyForCodeExchangePolicy["NotRequiredWhenUsingClientAuthentication"] = "NotRequiredWhenUsingClientAuthentication";
5045
+ })(ProofKeyForCodeExchangePolicy = exports.ProofKeyForCodeExchangePolicy || (exports.ProofKeyForCodeExchangePolicy = {}));
5046
+ /**
5047
+ * <ul>
5048
+ * <li>Bearer Token type as defined by <a href="https://tools.ietf.org/html/rfc6750">RFC 6750</a>.</li>
5049
+ * <li>MAC Token type as referenced by <a href="https://tools.ietf.org/html/rfc6749">RFC 6749</a> and
5050
+ * <a href="https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-05">
5051
+ * Draft RFC on OAuth 2.0 Message Authentication Code (MAC) Tokens</a>
5052
+ * </li>
5053
+ * </ul>
5054
+ *
5055
+ * @author Daniel DeGroff
5056
+ */
5057
+ var TokenType;
5058
+ (function (TokenType) {
5059
+ TokenType["Bearer"] = "Bearer";
5060
+ TokenType["MAC"] = "MAC";
5061
+ })(TokenType = exports.TokenType || (exports.TokenType = {}));
5062
+ var XMLSignatureLocation;
5063
+ (function (XMLSignatureLocation) {
5064
+ XMLSignatureLocation["Assertion"] = "Assertion";
5065
+ XMLSignatureLocation["Response"] = "Response";
5066
+ })(XMLSignatureLocation = exports.XMLSignatureLocation || (exports.XMLSignatureLocation = {}));
4799
5067
  /**
4800
5068
  * Describes the authenticator attachment modality preference for a WebAuthn workflow. See {@link AuthenticatorAttachment}
4801
5069
  *
@@ -4807,24 +5075,45 @@ var AuthenticatorAttachmentPreference;
4807
5075
  AuthenticatorAttachmentPreference["platform"] = "platform";
4808
5076
  AuthenticatorAttachmentPreference["crossPlatform"] = "crossPlatform";
4809
5077
  })(AuthenticatorAttachmentPreference = exports.AuthenticatorAttachmentPreference || (exports.AuthenticatorAttachmentPreference = {}));
4810
- var BreachAction;
4811
- (function (BreachAction) {
4812
- BreachAction["Off"] = "Off";
4813
- BreachAction["RecordOnly"] = "RecordOnly";
4814
- BreachAction["NotifyUser"] = "NotifyUser";
4815
- BreachAction["RequireChange"] = "RequireChange";
4816
- })(BreachAction = exports.BreachAction || (exports.BreachAction = {}));
5078
+ /**
5079
+ * @author Brett Guy
5080
+ */
5081
+ var IPAccessControlEntryAction;
5082
+ (function (IPAccessControlEntryAction) {
5083
+ IPAccessControlEntryAction["Allow"] = "Allow";
5084
+ IPAccessControlEntryAction["Block"] = "Block";
5085
+ })(IPAccessControlEntryAction = exports.IPAccessControlEntryAction || (exports.IPAccessControlEntryAction = {}));
5086
+ /**
5087
+ * @author Mikey Sleevi
5088
+ */
5089
+ var MessageType;
5090
+ (function (MessageType) {
5091
+ MessageType["SMS"] = "SMS";
5092
+ })(MessageType = exports.MessageType || (exports.MessageType = {}));
5093
+ /**
5094
+ * Status for content like usernames, profile attributes, etc.
5095
+ *
5096
+ * @author Brian Pontarelli
5097
+ */
5098
+ var ContentStatus;
5099
+ (function (ContentStatus) {
5100
+ ContentStatus["ACTIVE"] = "ACTIVE";
5101
+ ContentStatus["PENDING"] = "PENDING";
5102
+ ContentStatus["REJECTED"] = "REJECTED";
5103
+ })(ContentStatus = exports.ContentStatus || (exports.ContentStatus = {}));
4817
5104
  /**
4818
5105
  * @author Daniel DeGroff
4819
5106
  */
4820
- var BreachedPasswordStatus;
4821
- (function (BreachedPasswordStatus) {
4822
- BreachedPasswordStatus["None"] = "None";
4823
- BreachedPasswordStatus["ExactMatch"] = "ExactMatch";
4824
- BreachedPasswordStatus["SubAddressMatch"] = "SubAddressMatch";
4825
- BreachedPasswordStatus["PasswordOnly"] = "PasswordOnly";
4826
- BreachedPasswordStatus["CommonPassword"] = "CommonPassword";
4827
- })(BreachedPasswordStatus = exports.BreachedPasswordStatus || (exports.BreachedPasswordStatus = {}));
5107
+ var FormControl;
5108
+ (function (FormControl) {
5109
+ FormControl["checkbox"] = "checkbox";
5110
+ FormControl["number"] = "number";
5111
+ FormControl["password"] = "password";
5112
+ FormControl["radio"] = "radio";
5113
+ FormControl["select"] = "select";
5114
+ FormControl["textarea"] = "textarea";
5115
+ FormControl["text"] = "text";
5116
+ })(FormControl = exports.FormControl || (exports.FormControl = {}));
4828
5117
  var BreachMatchMode;
4829
5118
  (function (BreachMatchMode) {
4830
5119
  BreachMatchMode["Low"] = "Low";
@@ -4832,84 +5121,57 @@ var BreachMatchMode;
4832
5121
  BreachMatchMode["High"] = "High";
4833
5122
  })(BreachMatchMode = exports.BreachMatchMode || (exports.BreachMatchMode = {}));
4834
5123
  /**
4835
- * XML canonicalization method enumeration. This is used for the IdP and SP side of FusionAuth SAML.
5124
+ * COSE key type
4836
5125
  *
4837
- * @author Brian Pontarelli
4838
- */
4839
- var CanonicalizationMethod;
4840
- (function (CanonicalizationMethod) {
4841
- CanonicalizationMethod["exclusive"] = "exclusive";
4842
- CanonicalizationMethod["exclusive_with_comments"] = "exclusive_with_comments";
4843
- CanonicalizationMethod["inclusive"] = "inclusive";
4844
- CanonicalizationMethod["inclusive_with_comments"] = "inclusive_with_comments";
4845
- })(CanonicalizationMethod = exports.CanonicalizationMethod || (exports.CanonicalizationMethod = {}));
4846
- /**
4847
- * @author Brett Pontarelli
4848
- */
4849
- var CaptchaMethod;
4850
- (function (CaptchaMethod) {
4851
- CaptchaMethod["GoogleRecaptchaV2"] = "GoogleRecaptchaV2";
4852
- CaptchaMethod["GoogleRecaptchaV3"] = "GoogleRecaptchaV3";
4853
- CaptchaMethod["HCaptcha"] = "HCaptcha";
4854
- CaptchaMethod["HCaptchaEnterprise"] = "HCaptchaEnterprise";
4855
- })(CaptchaMethod = exports.CaptchaMethod || (exports.CaptchaMethod = {}));
4856
- /**
4857
- * @author Trevor Smith
5126
+ * @author Spencer Witt
4858
5127
  */
4859
- var ChangePasswordReason;
4860
- (function (ChangePasswordReason) {
4861
- ChangePasswordReason["Administrative"] = "Administrative";
4862
- ChangePasswordReason["Breached"] = "Breached";
4863
- ChangePasswordReason["Expired"] = "Expired";
4864
- ChangePasswordReason["Validation"] = "Validation";
4865
- })(ChangePasswordReason = exports.ChangePasswordReason || (exports.ChangePasswordReason = {}));
4866
- var ClientAuthenticationMethod;
4867
- (function (ClientAuthenticationMethod) {
4868
- ClientAuthenticationMethod["none"] = "none";
4869
- ClientAuthenticationMethod["client_secret_basic"] = "client_secret_basic";
4870
- ClientAuthenticationMethod["client_secret_post"] = "client_secret_post";
4871
- })(ClientAuthenticationMethod = exports.ClientAuthenticationMethod || (exports.ClientAuthenticationMethod = {}));
5128
+ var CoseKeyType;
5129
+ (function (CoseKeyType) {
5130
+ CoseKeyType["Reserved"] = "0";
5131
+ CoseKeyType["OKP"] = "1";
5132
+ CoseKeyType["EC2"] = "2";
5133
+ CoseKeyType["RSA"] = "3";
5134
+ CoseKeyType["Symmetric"] = "4";
5135
+ })(CoseKeyType = exports.CoseKeyType || (exports.CoseKeyType = {}));
4872
5136
  /**
4873
- * @author Brett Guy
5137
+ * @author Lyle Schemmerling
4874
5138
  */
4875
- var ClientAuthenticationPolicy;
4876
- (function (ClientAuthenticationPolicy) {
4877
- ClientAuthenticationPolicy["Required"] = "Required";
4878
- ClientAuthenticationPolicy["NotRequired"] = "NotRequired";
4879
- ClientAuthenticationPolicy["NotRequiredWhenUsingPKCE"] = "NotRequiredWhenUsingPKCE";
4880
- })(ClientAuthenticationPolicy = exports.ClientAuthenticationPolicy || (exports.ClientAuthenticationPolicy = {}));
5139
+ var SAMLv2DestinationAssertionPolicy;
5140
+ (function (SAMLv2DestinationAssertionPolicy) {
5141
+ SAMLv2DestinationAssertionPolicy["Enabled"] = "Enabled";
5142
+ SAMLv2DestinationAssertionPolicy["Disabled"] = "Disabled";
5143
+ SAMLv2DestinationAssertionPolicy["AllowAlternates"] = "AllowAlternates";
5144
+ })(SAMLv2DestinationAssertionPolicy = exports.SAMLv2DestinationAssertionPolicy || (exports.SAMLv2DestinationAssertionPolicy = {}));
4881
5145
  /**
4882
- * The types of connectors. This enum is stored as an ordinal on the <code>identities</code> table, order must be maintained.
5146
+ * Defines valid credential types. This is an extension point in the WebAuthn spec. The only defined value at this time is "public-key"
4883
5147
  *
4884
- * @author Trevor Smith
5148
+ * @author Spencer Witt
4885
5149
  */
4886
- var ConnectorType;
4887
- (function (ConnectorType) {
4888
- ConnectorType["FusionAuth"] = "FusionAuth";
4889
- ConnectorType["Generic"] = "Generic";
4890
- ConnectorType["LDAP"] = "LDAP";
4891
- })(ConnectorType = exports.ConnectorType || (exports.ConnectorType = {}));
5150
+ var PublicKeyCredentialType;
5151
+ (function (PublicKeyCredentialType) {
5152
+ PublicKeyCredentialType["publicKey"] = "public-key";
5153
+ })(PublicKeyCredentialType = exports.PublicKeyCredentialType || (exports.PublicKeyCredentialType = {}));
4892
5154
  /**
4893
- * Models a consent.
4894
- *
4895
5155
  * @author Daniel DeGroff
4896
5156
  */
4897
- var ConsentStatus;
4898
- (function (ConsentStatus) {
4899
- ConsentStatus["Active"] = "Active";
4900
- ConsentStatus["Revoked"] = "Revoked";
4901
- })(ConsentStatus = exports.ConsentStatus || (exports.ConsentStatus = {}));
5157
+ var FormFieldAdminPolicy;
5158
+ (function (FormFieldAdminPolicy) {
5159
+ FormFieldAdminPolicy["Edit"] = "Edit";
5160
+ FormFieldAdminPolicy["View"] = "View";
5161
+ })(FormFieldAdminPolicy = exports.FormFieldAdminPolicy || (exports.FormFieldAdminPolicy = {}));
4902
5162
  /**
4903
- * Status for content like usernames, profile attributes, etc.
4904
- *
4905
- * @author Brian Pontarelli
5163
+ * @author Daniel DeGroff
4906
5164
  */
4907
- var ContentStatus;
4908
- (function (ContentStatus) {
4909
- ContentStatus["ACTIVE"] = "ACTIVE";
4910
- ContentStatus["PENDING"] = "PENDING";
4911
- ContentStatus["REJECTED"] = "REJECTED";
4912
- })(ContentStatus = exports.ContentStatus || (exports.ContentStatus = {}));
5165
+ var HTTPMethod;
5166
+ (function (HTTPMethod) {
5167
+ HTTPMethod["GET"] = "GET";
5168
+ HTTPMethod["POST"] = "POST";
5169
+ HTTPMethod["PUT"] = "PUT";
5170
+ HTTPMethod["DELETE"] = "DELETE";
5171
+ HTTPMethod["HEAD"] = "HEAD";
5172
+ HTTPMethod["OPTIONS"] = "OPTIONS";
5173
+ HTTPMethod["PATCH"] = "PATCH";
5174
+ })(HTTPMethod = exports.HTTPMethod || (exports.HTTPMethod = {}));
4913
5175
  /**
4914
5176
  * A number identifying a cryptographic algorithm. Values should be registered with the <a
4915
5177
  * href="https://www.iana.org/assignments/cose/cose.xhtml#algorithms">IANA COSE Algorithms registry</a>
@@ -4929,273 +5191,116 @@ var CoseAlgorithmIdentifier;
4929
5191
  CoseAlgorithmIdentifier["PS512"] = "SHA-512";
4930
5192
  })(CoseAlgorithmIdentifier = exports.CoseAlgorithmIdentifier || (exports.CoseAlgorithmIdentifier = {}));
4931
5193
  /**
4932
- * COSE Elliptic Curve identifier to determine which elliptic curve to use with a given key
5194
+ * The types of lambdas that indicate how they are invoked by FusionAuth.
4933
5195
  *
4934
- * @author Spencer Witt
5196
+ * @author Brian Pontarelli
4935
5197
  */
4936
- var CoseEllipticCurve;
4937
- (function (CoseEllipticCurve) {
4938
- CoseEllipticCurve["Reserved"] = "Reserved";
4939
- CoseEllipticCurve["P256"] = "P256";
4940
- CoseEllipticCurve["P384"] = "P384";
4941
- CoseEllipticCurve["P521"] = "P521";
4942
- CoseEllipticCurve["X25519"] = "X25519";
4943
- CoseEllipticCurve["X448"] = "X448";
4944
- CoseEllipticCurve["Ed25519"] = "Ed25519";
4945
- CoseEllipticCurve["Ed448"] = "Ed448";
4946
- CoseEllipticCurve["Secp256k1"] = "Secp256k1";
4947
- })(CoseEllipticCurve = exports.CoseEllipticCurve || (exports.CoseEllipticCurve = {}));
5198
+ var LambdaType;
5199
+ (function (LambdaType) {
5200
+ LambdaType["JWTPopulate"] = "JWTPopulate";
5201
+ LambdaType["OpenIDReconcile"] = "OpenIDReconcile";
5202
+ LambdaType["SAMLv2Reconcile"] = "SAMLv2Reconcile";
5203
+ LambdaType["SAMLv2Populate"] = "SAMLv2Populate";
5204
+ LambdaType["AppleReconcile"] = "AppleReconcile";
5205
+ LambdaType["ExternalJWTReconcile"] = "ExternalJWTReconcile";
5206
+ LambdaType["FacebookReconcile"] = "FacebookReconcile";
5207
+ LambdaType["GoogleReconcile"] = "GoogleReconcile";
5208
+ LambdaType["HYPRReconcile"] = "HYPRReconcile";
5209
+ LambdaType["TwitterReconcile"] = "TwitterReconcile";
5210
+ LambdaType["LDAPConnectorReconcile"] = "LDAPConnectorReconcile";
5211
+ LambdaType["LinkedInReconcile"] = "LinkedInReconcile";
5212
+ LambdaType["EpicGamesReconcile"] = "EpicGamesReconcile";
5213
+ LambdaType["NintendoReconcile"] = "NintendoReconcile";
5214
+ LambdaType["SonyPSNReconcile"] = "SonyPSNReconcile";
5215
+ LambdaType["SteamReconcile"] = "SteamReconcile";
5216
+ LambdaType["TwitchReconcile"] = "TwitchReconcile";
5217
+ LambdaType["XboxReconcile"] = "XboxReconcile";
5218
+ LambdaType["ClientCredentialsJWTPopulate"] = "ClientCredentialsJWTPopulate";
5219
+ LambdaType["SCIMServerGroupRequestConverter"] = "SCIMServerGroupRequestConverter";
5220
+ LambdaType["SCIMServerGroupResponseConverter"] = "SCIMServerGroupResponseConverter";
5221
+ LambdaType["SCIMServerUserRequestConverter"] = "SCIMServerUserRequestConverter";
5222
+ LambdaType["SCIMServerUserResponseConverter"] = "SCIMServerUserResponseConverter";
5223
+ LambdaType["SelfServiceRegistrationValidation"] = "SelfServiceRegistrationValidation";
5224
+ })(LambdaType = exports.LambdaType || (exports.LambdaType = {}));
4948
5225
  /**
4949
- * COSE key type
5226
+ * Used to communicate whether and how authenticator attestation should be delivered to the Relying Party
4950
5227
  *
4951
5228
  * @author Spencer Witt
4952
5229
  */
4953
- var CoseKeyType;
4954
- (function (CoseKeyType) {
4955
- CoseKeyType["Reserved"] = "0";
4956
- CoseKeyType["OKP"] = "1";
4957
- CoseKeyType["EC2"] = "2";
4958
- CoseKeyType["RSA"] = "3";
4959
- CoseKeyType["Symmetric"] = "4";
4960
- })(CoseKeyType = exports.CoseKeyType || (exports.CoseKeyType = {}));
4961
- var DeviceType;
4962
- (function (DeviceType) {
4963
- DeviceType["BROWSER"] = "BROWSER";
4964
- DeviceType["DESKTOP"] = "DESKTOP";
4965
- DeviceType["LAPTOP"] = "LAPTOP";
4966
- DeviceType["MOBILE"] = "MOBILE";
4967
- DeviceType["OTHER"] = "OTHER";
4968
- DeviceType["SERVER"] = "SERVER";
4969
- DeviceType["TABLET"] = "TABLET";
4970
- DeviceType["TV"] = "TV";
4971
- DeviceType["UNKNOWN"] = "UNKNOWN";
4972
- })(DeviceType = exports.DeviceType || (exports.DeviceType = {}));
4973
- var EmailSecurityType;
4974
- (function (EmailSecurityType) {
4975
- EmailSecurityType["NONE"] = "NONE";
4976
- EmailSecurityType["SSL"] = "SSL";
4977
- EmailSecurityType["TLS"] = "TLS";
4978
- })(EmailSecurityType = exports.EmailSecurityType || (exports.EmailSecurityType = {}));
4979
- /**
4980
- * Event Log Type
4981
- *
4982
- * @author Daniel DeGroff
4983
- */
4984
- var EventLogType;
4985
- (function (EventLogType) {
4986
- EventLogType["Information"] = "Information";
4987
- EventLogType["Debug"] = "Debug";
4988
- EventLogType["Error"] = "Error";
4989
- })(EventLogType = exports.EventLogType || (exports.EventLogType = {}));
4990
- /**
4991
- * Models the event types that FusionAuth produces.
4992
- *
4993
- * @author Brian Pontarelli
4994
- */
4995
- var EventType;
4996
- (function (EventType) {
4997
- EventType["JWTPublicKeyUpdate"] = "jwt.public-key.update";
4998
- EventType["JWTRefreshTokenRevoke"] = "jwt.refresh-token.revoke";
4999
- EventType["JWTRefresh"] = "jwt.refresh";
5000
- EventType["AuditLogCreate"] = "audit-log.create";
5001
- EventType["EventLogCreate"] = "event-log.create";
5002
- EventType["KickstartSuccess"] = "kickstart.success";
5003
- EventType["GroupCreate"] = "group.create";
5004
- EventType["GroupCreateComplete"] = "group.create.complete";
5005
- EventType["GroupDelete"] = "group.delete";
5006
- EventType["GroupDeleteComplete"] = "group.delete.complete";
5007
- EventType["GroupMemberAdd"] = "group.member.add";
5008
- EventType["GroupMemberAddComplete"] = "group.member.add.complete";
5009
- EventType["GroupMemberRemove"] = "group.member.remove";
5010
- EventType["GroupMemberRemoveComplete"] = "group.member.remove.complete";
5011
- EventType["GroupMemberUpdate"] = "group.member.update";
5012
- EventType["GroupMemberUpdateComplete"] = "group.member.update.complete";
5013
- EventType["GroupUpdate"] = "group.update";
5014
- EventType["GroupUpdateComplete"] = "group.update.complete";
5015
- EventType["UserAction"] = "user.action";
5016
- EventType["UserBulkCreate"] = "user.bulk.create";
5017
- EventType["UserCreate"] = "user.create";
5018
- EventType["UserCreateComplete"] = "user.create.complete";
5019
- EventType["UserDeactivate"] = "user.deactivate";
5020
- EventType["UserDelete"] = "user.delete";
5021
- EventType["UserDeleteComplete"] = "user.delete.complete";
5022
- EventType["UserEmailUpdate"] = "user.email.update";
5023
- EventType["UserEmailVerified"] = "user.email.verified";
5024
- EventType["UserIdentityProviderLink"] = "user.identity-provider.link";
5025
- EventType["UserIdentityProviderUnlink"] = "user.identity-provider.unlink";
5026
- EventType["UserLoginIdDuplicateOnCreate"] = "user.loginId.duplicate.create";
5027
- EventType["UserLoginIdDuplicateOnUpdate"] = "user.loginId.duplicate.update";
5028
- EventType["UserLoginFailed"] = "user.login.failed";
5029
- EventType["UserLoginNewDevice"] = "user.login.new-device";
5030
- EventType["UserLoginSuccess"] = "user.login.success";
5031
- EventType["UserLoginSuspicious"] = "user.login.suspicious";
5032
- EventType["UserPasswordBreach"] = "user.password.breach";
5033
- EventType["UserPasswordResetSend"] = "user.password.reset.send";
5034
- EventType["UserPasswordResetStart"] = "user.password.reset.start";
5035
- EventType["UserPasswordResetSuccess"] = "user.password.reset.success";
5036
- EventType["UserPasswordUpdate"] = "user.password.update";
5037
- EventType["UserReactivate"] = "user.reactivate";
5038
- EventType["UserRegistrationCreate"] = "user.registration.create";
5039
- EventType["UserRegistrationCreateComplete"] = "user.registration.create.complete";
5040
- EventType["UserRegistrationDelete"] = "user.registration.delete";
5041
- EventType["UserRegistrationDeleteComplete"] = "user.registration.delete.complete";
5042
- EventType["UserRegistrationUpdate"] = "user.registration.update";
5043
- EventType["UserRegistrationUpdateComplete"] = "user.registration.update.complete";
5044
- EventType["UserRegistrationVerified"] = "user.registration.verified";
5045
- EventType["UserTwoFactorMethodAdd"] = "user.two-factor.method.add";
5046
- EventType["UserTwoFactorMethodRemove"] = "user.two-factor.method.remove";
5047
- EventType["UserUpdate"] = "user.update";
5048
- EventType["UserUpdateComplete"] = "user.update.complete";
5049
- EventType["Test"] = "test";
5050
- })(EventType = exports.EventType || (exports.EventType = {}));
5051
- /**
5052
- * @author Brian Pontarelli
5053
- */
5054
- var ExpiryUnit;
5055
- (function (ExpiryUnit) {
5056
- ExpiryUnit["MINUTES"] = "MINUTES";
5057
- ExpiryUnit["HOURS"] = "HOURS";
5058
- ExpiryUnit["DAYS"] = "DAYS";
5059
- ExpiryUnit["WEEKS"] = "WEEKS";
5060
- ExpiryUnit["MONTHS"] = "MONTHS";
5061
- ExpiryUnit["YEARS"] = "YEARS";
5062
- })(ExpiryUnit = exports.ExpiryUnit || (exports.ExpiryUnit = {}));
5063
- var FamilyRole;
5064
- (function (FamilyRole) {
5065
- FamilyRole["Child"] = "Child";
5066
- FamilyRole["Teen"] = "Teen";
5067
- FamilyRole["Adult"] = "Adult";
5068
- })(FamilyRole = exports.FamilyRole || (exports.FamilyRole = {}));
5069
- /**
5070
- * @author Daniel DeGroff
5071
- */
5072
- var FormControl;
5073
- (function (FormControl) {
5074
- FormControl["checkbox"] = "checkbox";
5075
- FormControl["number"] = "number";
5076
- FormControl["password"] = "password";
5077
- FormControl["radio"] = "radio";
5078
- FormControl["select"] = "select";
5079
- FormControl["textarea"] = "textarea";
5080
- FormControl["text"] = "text";
5081
- })(FormControl = exports.FormControl || (exports.FormControl = {}));
5082
- /**
5083
- * @author Daniel DeGroff
5084
- */
5085
- var FormDataType;
5086
- (function (FormDataType) {
5087
- FormDataType["bool"] = "bool";
5088
- FormDataType["consent"] = "consent";
5089
- FormDataType["date"] = "date";
5090
- FormDataType["email"] = "email";
5091
- FormDataType["number"] = "number";
5092
- FormDataType["string"] = "string";
5093
- })(FormDataType = exports.FormDataType || (exports.FormDataType = {}));
5230
+ var AttestationConveyancePreference;
5231
+ (function (AttestationConveyancePreference) {
5232
+ AttestationConveyancePreference["none"] = "none";
5233
+ AttestationConveyancePreference["indirect"] = "indirect";
5234
+ AttestationConveyancePreference["direct"] = "direct";
5235
+ AttestationConveyancePreference["enterprise"] = "enterprise";
5236
+ })(AttestationConveyancePreference = exports.AttestationConveyancePreference || (exports.AttestationConveyancePreference = {}));
5094
5237
  /**
5095
5238
  * @author Daniel DeGroff
5096
5239
  */
5097
- var FormFieldAdminPolicy;
5098
- (function (FormFieldAdminPolicy) {
5099
- FormFieldAdminPolicy["Edit"] = "Edit";
5100
- FormFieldAdminPolicy["View"] = "View";
5101
- })(FormFieldAdminPolicy = exports.FormFieldAdminPolicy || (exports.FormFieldAdminPolicy = {}));
5240
+ var ObjectState;
5241
+ (function (ObjectState) {
5242
+ ObjectState["Active"] = "Active";
5243
+ ObjectState["Inactive"] = "Inactive";
5244
+ ObjectState["PendingDelete"] = "PendingDelete";
5245
+ })(ObjectState = exports.ObjectState || (exports.ObjectState = {}));
5102
5246
  /**
5103
- * @author Daniel DeGroff
5247
+ * @author Brett Pontarelli
5104
5248
  */
5105
- var FormType;
5106
- (function (FormType) {
5107
- FormType["registration"] = "registration";
5108
- FormType["adminRegistration"] = "adminRegistration";
5109
- FormType["adminUser"] = "adminUser";
5110
- FormType["selfServiceUser"] = "selfServiceUser";
5111
- })(FormType = exports.FormType || (exports.FormType = {}));
5249
+ var AuthenticationThreats;
5250
+ (function (AuthenticationThreats) {
5251
+ AuthenticationThreats["ImpossibleTravel"] = "ImpossibleTravel";
5252
+ })(AuthenticationThreats = exports.AuthenticationThreats || (exports.AuthenticationThreats = {}));
5112
5253
  /**
5113
- * Authorization Grant types as defined by the <a href="https://tools.ietf.org/html/rfc6749">The OAuth 2.0 Authorization
5114
- * Framework - RFC 6749</a>.
5115
- * <p>
5116
- * Specific names as defined by <a href="https://tools.ietf.org/html/rfc7591#section-4.1">
5117
- * OAuth 2.0 Dynamic Client Registration Protocol - RFC 7591 Section 4.1</a>
5254
+ * Describes the Relying Party's requirements for <a href="https://www.w3.org/TR/webauthn-2/#client-side-discoverable-credential">client-side
5255
+ * discoverable credentials</a> (formerly known as "resident keys")
5118
5256
  *
5119
- * @author Daniel DeGroff
5257
+ * @author Spencer Witt
5120
5258
  */
5121
- var GrantType;
5122
- (function (GrantType) {
5123
- GrantType["authorization_code"] = "authorization_code";
5124
- GrantType["implicit"] = "implicit";
5125
- GrantType["password"] = "password";
5126
- GrantType["client_credentials"] = "client_credentials";
5127
- GrantType["refresh_token"] = "refresh_token";
5128
- GrantType["unknown"] = "unknown";
5129
- GrantType["device_code"] = "urn:ietf:params:oauth:grant-type:device_code";
5130
- })(GrantType = exports.GrantType || (exports.GrantType = {}));
5259
+ var ResidentKeyRequirement;
5260
+ (function (ResidentKeyRequirement) {
5261
+ ResidentKeyRequirement["discouraged"] = "discouraged";
5262
+ ResidentKeyRequirement["preferred"] = "preferred";
5263
+ ResidentKeyRequirement["required"] = "required";
5264
+ })(ResidentKeyRequirement = exports.ResidentKeyRequirement || (exports.ResidentKeyRequirement = {}));
5131
5265
  /**
5132
- * @author Daniel DeGroff
5266
+ * @author Brett Guy
5133
5267
  */
5134
- var HTTPMethod;
5135
- (function (HTTPMethod) {
5136
- HTTPMethod["GET"] = "GET";
5137
- HTTPMethod["POST"] = "POST";
5138
- HTTPMethod["PUT"] = "PUT";
5139
- HTTPMethod["DELETE"] = "DELETE";
5140
- HTTPMethod["HEAD"] = "HEAD";
5141
- HTTPMethod["OPTIONS"] = "OPTIONS";
5142
- HTTPMethod["PATCH"] = "PATCH";
5143
- })(HTTPMethod = exports.HTTPMethod || (exports.HTTPMethod = {}));
5268
+ var ClientAuthenticationPolicy;
5269
+ (function (ClientAuthenticationPolicy) {
5270
+ ClientAuthenticationPolicy["Required"] = "Required";
5271
+ ClientAuthenticationPolicy["NotRequired"] = "NotRequired";
5272
+ ClientAuthenticationPolicy["NotRequiredWhenUsingPKCE"] = "NotRequiredWhenUsingPKCE";
5273
+ })(ClientAuthenticationPolicy = exports.ClientAuthenticationPolicy || (exports.ClientAuthenticationPolicy = {}));
5144
5274
  /**
5145
- * The IdP behavior when no user link has been made yet.
5146
- *
5147
5275
  * @author Daniel DeGroff
5148
5276
  */
5149
- var IdentityProviderLinkingStrategy;
5150
- (function (IdentityProviderLinkingStrategy) {
5151
- IdentityProviderLinkingStrategy["CreatePendingLink"] = "CreatePendingLink";
5152
- IdentityProviderLinkingStrategy["Disabled"] = "Disabled";
5153
- IdentityProviderLinkingStrategy["LinkAnonymously"] = "LinkAnonymously";
5154
- IdentityProviderLinkingStrategy["LinkByEmail"] = "LinkByEmail";
5155
- IdentityProviderLinkingStrategy["LinkByEmailForExistingUser"] = "LinkByEmailForExistingUser";
5156
- IdentityProviderLinkingStrategy["LinkByUsername"] = "LinkByUsername";
5157
- IdentityProviderLinkingStrategy["LinkByUsernameForExistingUser"] = "LinkByUsernameForExistingUser";
5158
- IdentityProviderLinkingStrategy["Unsupported"] = "Unsupported";
5159
- })(IdentityProviderLinkingStrategy = exports.IdentityProviderLinkingStrategy || (exports.IdentityProviderLinkingStrategy = {}));
5277
+ var RefreshTokenUsagePolicy;
5278
+ (function (RefreshTokenUsagePolicy) {
5279
+ RefreshTokenUsagePolicy["Reusable"] = "Reusable";
5280
+ RefreshTokenUsagePolicy["OneTimeUse"] = "OneTimeUse";
5281
+ })(RefreshTokenUsagePolicy = exports.RefreshTokenUsagePolicy || (exports.RefreshTokenUsagePolicy = {}));
5282
+ var DeviceType;
5283
+ (function (DeviceType) {
5284
+ DeviceType["BROWSER"] = "BROWSER";
5285
+ DeviceType["DESKTOP"] = "DESKTOP";
5286
+ DeviceType["LAPTOP"] = "LAPTOP";
5287
+ DeviceType["MOBILE"] = "MOBILE";
5288
+ DeviceType["OTHER"] = "OTHER";
5289
+ DeviceType["SERVER"] = "SERVER";
5290
+ DeviceType["TABLET"] = "TABLET";
5291
+ DeviceType["TV"] = "TV";
5292
+ DeviceType["UNKNOWN"] = "UNKNOWN";
5293
+ })(DeviceType = exports.DeviceType || (exports.DeviceType = {}));
5160
5294
  /**
5161
5295
  * @author Brett Pontarelli
5162
5296
  */
5163
- var IdentityProviderLoginMethod;
5164
- (function (IdentityProviderLoginMethod) {
5165
- IdentityProviderLoginMethod["UsePopup"] = "UsePopup";
5166
- IdentityProviderLoginMethod["UseRedirect"] = "UseRedirect";
5167
- IdentityProviderLoginMethod["UseVendorJavaScript"] = "UseVendorJavaScript";
5168
- })(IdentityProviderLoginMethod = exports.IdentityProviderLoginMethod || (exports.IdentityProviderLoginMethod = {}));
5169
- /**
5170
- * @author Daniel DeGroff
5171
- */
5172
- var IdentityProviderType;
5173
- (function (IdentityProviderType) {
5174
- IdentityProviderType["Apple"] = "Apple";
5175
- IdentityProviderType["EpicGames"] = "EpicGames";
5176
- IdentityProviderType["ExternalJWT"] = "ExternalJWT";
5177
- IdentityProviderType["Facebook"] = "Facebook";
5178
- IdentityProviderType["Google"] = "Google";
5179
- IdentityProviderType["HYPR"] = "HYPR";
5180
- IdentityProviderType["LinkedIn"] = "LinkedIn";
5181
- IdentityProviderType["Nintendo"] = "Nintendo";
5182
- IdentityProviderType["OpenIDConnect"] = "OpenIDConnect";
5183
- IdentityProviderType["SAMLv2"] = "SAMLv2";
5184
- IdentityProviderType["SAMLv2IdPInitiated"] = "SAMLv2IdPInitiated";
5185
- IdentityProviderType["SonyPSN"] = "SonyPSN";
5186
- IdentityProviderType["Steam"] = "Steam";
5187
- IdentityProviderType["Twitch"] = "Twitch";
5188
- IdentityProviderType["Twitter"] = "Twitter";
5189
- IdentityProviderType["Xbox"] = "Xbox";
5190
- })(IdentityProviderType = exports.IdentityProviderType || (exports.IdentityProviderType = {}));
5191
- /**
5192
- * @author Brett Guy
5193
- */
5194
- var IPAccessControlEntryAction;
5195
- (function (IPAccessControlEntryAction) {
5196
- IPAccessControlEntryAction["Allow"] = "Allow";
5197
- IPAccessControlEntryAction["Block"] = "Block";
5198
- })(IPAccessControlEntryAction = exports.IPAccessControlEntryAction || (exports.IPAccessControlEntryAction = {}));
5297
+ var CaptchaMethod;
5298
+ (function (CaptchaMethod) {
5299
+ CaptchaMethod["GoogleRecaptchaV2"] = "GoogleRecaptchaV2";
5300
+ CaptchaMethod["GoogleRecaptchaV3"] = "GoogleRecaptchaV3";
5301
+ CaptchaMethod["HCaptcha"] = "HCaptcha";
5302
+ CaptchaMethod["HCaptchaEnterprise"] = "HCaptchaEnterprise";
5303
+ })(CaptchaMethod = exports.CaptchaMethod || (exports.CaptchaMethod = {}));
5199
5304
  var KeyAlgorithm;
5200
5305
  (function (KeyAlgorithm) {
5201
5306
  KeyAlgorithm["ES256"] = "ES256";
@@ -5208,6 +5313,29 @@ var KeyAlgorithm;
5208
5313
  KeyAlgorithm["RS384"] = "RS384";
5209
5314
  KeyAlgorithm["RS512"] = "RS512";
5210
5315
  })(KeyAlgorithm = exports.KeyAlgorithm || (exports.KeyAlgorithm = {}));
5316
+ /**
5317
+ * @author Daniel DeGroff
5318
+ */
5319
+ var FormType;
5320
+ (function (FormType) {
5321
+ FormType["registration"] = "registration";
5322
+ FormType["adminRegistration"] = "adminRegistration";
5323
+ FormType["adminUser"] = "adminUser";
5324
+ FormType["selfServiceUser"] = "selfServiceUser";
5325
+ })(FormType = exports.FormType || (exports.FormType = {}));
5326
+ /**
5327
+ * Used to indicate what type of attestation was included in the authenticator response for a given WebAuthn credential at the time it was created
5328
+ *
5329
+ * @author Spencer Witt
5330
+ */
5331
+ var AttestationType;
5332
+ (function (AttestationType) {
5333
+ AttestationType["basic"] = "basic";
5334
+ AttestationType["self"] = "self";
5335
+ AttestationType["attestationCa"] = "attestationCa";
5336
+ AttestationType["anonymizationCa"] = "anonymizationCa";
5337
+ AttestationType["none"] = "none";
5338
+ })(AttestationType = exports.AttestationType || (exports.AttestationType = {}));
5211
5339
  var KeyType;
5212
5340
  (function (KeyType) {
5213
5341
  KeyType["EC"] = "EC";
@@ -5215,165 +5343,99 @@ var KeyType;
5215
5343
  KeyType["HMAC"] = "HMAC";
5216
5344
  })(KeyType = exports.KeyType || (exports.KeyType = {}));
5217
5345
  /**
5218
- * The use type of a key.
5346
+ * The types of connectors. This enum is stored as an ordinal on the <code>identities</code> table, order must be maintained.
5219
5347
  *
5220
- * @author Daniel DeGroff
5348
+ * @author Trevor Smith
5221
5349
  */
5222
- var KeyUse;
5223
- (function (KeyUse) {
5224
- KeyUse["SignOnly"] = "SignOnly";
5225
- KeyUse["SignAndVerify"] = "SignAndVerify";
5226
- KeyUse["VerifyOnly"] = "VerifyOnly";
5227
- })(KeyUse = exports.KeyUse || (exports.KeyUse = {}));
5350
+ var ConnectorType;
5351
+ (function (ConnectorType) {
5352
+ ConnectorType["FusionAuth"] = "FusionAuth";
5353
+ ConnectorType["Generic"] = "Generic";
5354
+ ConnectorType["LDAP"] = "LDAP";
5355
+ })(ConnectorType = exports.ConnectorType || (exports.ConnectorType = {}));
5228
5356
  /**
5229
5357
  * @author Daniel DeGroff
5230
5358
  */
5231
- var LambdaEngineType;
5232
- (function (LambdaEngineType) {
5233
- LambdaEngineType["GraalJS"] = "GraalJS";
5234
- LambdaEngineType["Nashorn"] = "Nashorn";
5235
- })(LambdaEngineType = exports.LambdaEngineType || (exports.LambdaEngineType = {}));
5359
+ var MultiFactorLoginPolicy;
5360
+ (function (MultiFactorLoginPolicy) {
5361
+ MultiFactorLoginPolicy["Disabled"] = "Disabled";
5362
+ MultiFactorLoginPolicy["Enabled"] = "Enabled";
5363
+ MultiFactorLoginPolicy["Required"] = "Required";
5364
+ })(MultiFactorLoginPolicy = exports.MultiFactorLoginPolicy || (exports.MultiFactorLoginPolicy = {}));
5236
5365
  /**
5237
- * The types of lambdas that indicate how they are invoked by FusionAuth.
5366
+ * Describes the <a href="https://www.w3.org/TR/webauthn-2/#authenticator-attachment-modality">authenticator attachment modality</a>.
5238
5367
  *
5239
- * @author Brian Pontarelli
5368
+ * @author Spencer Witt
5240
5369
  */
5241
- var LambdaType;
5242
- (function (LambdaType) {
5243
- LambdaType["JWTPopulate"] = "JWTPopulate";
5244
- LambdaType["OpenIDReconcile"] = "OpenIDReconcile";
5245
- LambdaType["SAMLv2Reconcile"] = "SAMLv2Reconcile";
5246
- LambdaType["SAMLv2Populate"] = "SAMLv2Populate";
5247
- LambdaType["AppleReconcile"] = "AppleReconcile";
5248
- LambdaType["ExternalJWTReconcile"] = "ExternalJWTReconcile";
5249
- LambdaType["FacebookReconcile"] = "FacebookReconcile";
5250
- LambdaType["GoogleReconcile"] = "GoogleReconcile";
5251
- LambdaType["HYPRReconcile"] = "HYPRReconcile";
5252
- LambdaType["TwitterReconcile"] = "TwitterReconcile";
5253
- LambdaType["LDAPConnectorReconcile"] = "LDAPConnectorReconcile";
5254
- LambdaType["LinkedInReconcile"] = "LinkedInReconcile";
5255
- LambdaType["EpicGamesReconcile"] = "EpicGamesReconcile";
5256
- LambdaType["NintendoReconcile"] = "NintendoReconcile";
5257
- LambdaType["SonyPSNReconcile"] = "SonyPSNReconcile";
5258
- LambdaType["SteamReconcile"] = "SteamReconcile";
5259
- LambdaType["TwitchReconcile"] = "TwitchReconcile";
5260
- LambdaType["XboxReconcile"] = "XboxReconcile";
5261
- LambdaType["ClientCredentialsJWTPopulate"] = "ClientCredentialsJWTPopulate";
5262
- LambdaType["SCIMServerGroupRequestConverter"] = "SCIMServerGroupRequestConverter";
5263
- LambdaType["SCIMServerGroupResponseConverter"] = "SCIMServerGroupResponseConverter";
5264
- LambdaType["SCIMServerUserRequestConverter"] = "SCIMServerUserRequestConverter";
5265
- LambdaType["SCIMServerUserResponseConverter"] = "SCIMServerUserResponseConverter";
5266
- LambdaType["SelfServiceRegistrationValidation"] = "SelfServiceRegistrationValidation";
5267
- })(LambdaType = exports.LambdaType || (exports.LambdaType = {}));
5268
- var LDAPSecurityMethod;
5269
- (function (LDAPSecurityMethod) {
5270
- LDAPSecurityMethod["None"] = "None";
5271
- LDAPSecurityMethod["LDAPS"] = "LDAPS";
5272
- LDAPSecurityMethod["StartTLS"] = "StartTLS";
5273
- })(LDAPSecurityMethod = exports.LDAPSecurityMethod || (exports.LDAPSecurityMethod = {}));
5370
+ var AuthenticatorAttachment;
5371
+ (function (AuthenticatorAttachment) {
5372
+ AuthenticatorAttachment["platform"] = "platform";
5373
+ AuthenticatorAttachment["crossPlatform"] = "crossPlatform";
5374
+ })(AuthenticatorAttachment = exports.AuthenticatorAttachment || (exports.AuthenticatorAttachment = {}));
5375
+ /**
5376
+ * COSE Elliptic Curve identifier to determine which elliptic curve to use with a given key
5377
+ *
5378
+ * @author Spencer Witt
5379
+ */
5380
+ var CoseEllipticCurve;
5381
+ (function (CoseEllipticCurve) {
5382
+ CoseEllipticCurve["Reserved"] = "Reserved";
5383
+ CoseEllipticCurve["P256"] = "P256";
5384
+ CoseEllipticCurve["P384"] = "P384";
5385
+ CoseEllipticCurve["P521"] = "P521";
5386
+ CoseEllipticCurve["X25519"] = "X25519";
5387
+ CoseEllipticCurve["X448"] = "X448";
5388
+ CoseEllipticCurve["Ed25519"] = "Ed25519";
5389
+ CoseEllipticCurve["Ed448"] = "Ed448";
5390
+ CoseEllipticCurve["Secp256k1"] = "Secp256k1";
5391
+ })(CoseEllipticCurve = exports.CoseEllipticCurve || (exports.CoseEllipticCurve = {}));
5274
5392
  var LoginIdType;
5275
5393
  (function (LoginIdType) {
5276
5394
  LoginIdType["email"] = "email";
5277
5395
  LoginIdType["username"] = "username";
5278
5396
  })(LoginIdType = exports.LoginIdType || (exports.LoginIdType = {}));
5279
- /**
5280
- * @author Matthew Altman
5281
- */
5282
- var LogoutBehavior;
5283
- (function (LogoutBehavior) {
5284
- LogoutBehavior["RedirectOnly"] = "RedirectOnly";
5285
- LogoutBehavior["AllApplications"] = "AllApplications";
5286
- })(LogoutBehavior = exports.LogoutBehavior || (exports.LogoutBehavior = {}));
5287
- /**
5288
- * @author Mikey Sleevi
5289
- */
5290
- var MessageType;
5291
- (function (MessageType) {
5292
- MessageType["SMS"] = "SMS";
5293
- })(MessageType = exports.MessageType || (exports.MessageType = {}));
5294
- /**
5295
- * @author Brett Guy
5296
- */
5297
- var MessengerType;
5298
- (function (MessengerType) {
5299
- MessengerType["Generic"] = "Generic";
5300
- MessengerType["Kafka"] = "Kafka";
5301
- MessengerType["Twilio"] = "Twilio";
5302
- })(MessengerType = exports.MessengerType || (exports.MessengerType = {}));
5397
+ var RegistrationType;
5398
+ (function (RegistrationType) {
5399
+ RegistrationType["basic"] = "basic";
5400
+ RegistrationType["advanced"] = "advanced";
5401
+ })(RegistrationType = exports.RegistrationType || (exports.RegistrationType = {}));
5303
5402
  /**
5304
5403
  * @author Daniel DeGroff
5305
5404
  */
5306
- var MultiFactorLoginPolicy;
5307
- (function (MultiFactorLoginPolicy) {
5308
- MultiFactorLoginPolicy["Disabled"] = "Disabled";
5309
- MultiFactorLoginPolicy["Enabled"] = "Enabled";
5310
- MultiFactorLoginPolicy["Required"] = "Required";
5311
- })(MultiFactorLoginPolicy = exports.MultiFactorLoginPolicy || (exports.MultiFactorLoginPolicy = {}));
5405
+ var RefreshTokenExpirationPolicy;
5406
+ (function (RefreshTokenExpirationPolicy) {
5407
+ RefreshTokenExpirationPolicy["Fixed"] = "Fixed";
5408
+ RefreshTokenExpirationPolicy["SlidingWindow"] = "SlidingWindow";
5409
+ RefreshTokenExpirationPolicy["SlidingWindowWithMaximumLifetime"] = "SlidingWindowWithMaximumLifetime";
5410
+ })(RefreshTokenExpirationPolicy = exports.RefreshTokenExpirationPolicy || (exports.RefreshTokenExpirationPolicy = {}));
5312
5411
  /**
5313
- * @author Johnathon Wood
5412
+ * @author Daniel DeGroff
5314
5413
  */
5315
- var Oauth2AuthorizedURLValidationPolicy;
5316
- (function (Oauth2AuthorizedURLValidationPolicy) {
5317
- Oauth2AuthorizedURLValidationPolicy["AllowWildcards"] = "AllowWildcards";
5318
- Oauth2AuthorizedURLValidationPolicy["ExactMatch"] = "ExactMatch";
5319
- })(Oauth2AuthorizedURLValidationPolicy = exports.Oauth2AuthorizedURLValidationPolicy || (exports.Oauth2AuthorizedURLValidationPolicy = {}));
5320
- var OAuthErrorReason;
5321
- (function (OAuthErrorReason) {
5322
- OAuthErrorReason["auth_code_not_found"] = "auth_code_not_found";
5323
- OAuthErrorReason["access_token_malformed"] = "access_token_malformed";
5324
- OAuthErrorReason["access_token_expired"] = "access_token_expired";
5325
- OAuthErrorReason["access_token_unavailable_for_processing"] = "access_token_unavailable_for_processing";
5326
- OAuthErrorReason["access_token_failed_processing"] = "access_token_failed_processing";
5327
- OAuthErrorReason["refresh_token_not_found"] = "refresh_token_not_found";
5328
- OAuthErrorReason["refresh_token_type_not_supported"] = "refresh_token_type_not_supported";
5329
- OAuthErrorReason["invalid_client_id"] = "invalid_client_id";
5330
- OAuthErrorReason["invalid_user_credentials"] = "invalid_user_credentials";
5331
- OAuthErrorReason["invalid_grant_type"] = "invalid_grant_type";
5332
- OAuthErrorReason["invalid_origin"] = "invalid_origin";
5333
- OAuthErrorReason["invalid_origin_opaque"] = "invalid_origin_opaque";
5334
- OAuthErrorReason["invalid_pkce_code_verifier"] = "invalid_pkce_code_verifier";
5335
- OAuthErrorReason["invalid_pkce_code_challenge"] = "invalid_pkce_code_challenge";
5336
- OAuthErrorReason["invalid_pkce_code_challenge_method"] = "invalid_pkce_code_challenge_method";
5337
- OAuthErrorReason["invalid_redirect_uri"] = "invalid_redirect_uri";
5338
- OAuthErrorReason["invalid_response_mode"] = "invalid_response_mode";
5339
- OAuthErrorReason["invalid_response_type"] = "invalid_response_type";
5340
- OAuthErrorReason["invalid_id_token_hint"] = "invalid_id_token_hint";
5341
- OAuthErrorReason["invalid_post_logout_redirect_uri"] = "invalid_post_logout_redirect_uri";
5342
- OAuthErrorReason["invalid_device_code"] = "invalid_device_code";
5343
- OAuthErrorReason["invalid_user_code"] = "invalid_user_code";
5344
- OAuthErrorReason["invalid_additional_client_id"] = "invalid_additional_client_id";
5345
- OAuthErrorReason["invalid_target_entity_scope"] = "invalid_target_entity_scope";
5346
- OAuthErrorReason["invalid_entity_permission_scope"] = "invalid_entity_permission_scope";
5347
- OAuthErrorReason["grant_type_disabled"] = "grant_type_disabled";
5348
- OAuthErrorReason["missing_client_id"] = "missing_client_id";
5349
- OAuthErrorReason["missing_client_secret"] = "missing_client_secret";
5350
- OAuthErrorReason["missing_code"] = "missing_code";
5351
- OAuthErrorReason["missing_code_challenge"] = "missing_code_challenge";
5352
- OAuthErrorReason["missing_code_verifier"] = "missing_code_verifier";
5353
- OAuthErrorReason["missing_device_code"] = "missing_device_code";
5354
- OAuthErrorReason["missing_grant_type"] = "missing_grant_type";
5355
- OAuthErrorReason["missing_redirect_uri"] = "missing_redirect_uri";
5356
- OAuthErrorReason["missing_refresh_token"] = "missing_refresh_token";
5357
- OAuthErrorReason["missing_response_type"] = "missing_response_type";
5358
- OAuthErrorReason["missing_token"] = "missing_token";
5359
- OAuthErrorReason["missing_user_code"] = "missing_user_code";
5360
- OAuthErrorReason["missing_verification_uri"] = "missing_verification_uri";
5361
- OAuthErrorReason["login_prevented"] = "login_prevented";
5362
- OAuthErrorReason["not_licensed"] = "not_licensed";
5363
- OAuthErrorReason["user_code_expired"] = "user_code_expired";
5364
- OAuthErrorReason["user_expired"] = "user_expired";
5365
- OAuthErrorReason["user_locked"] = "user_locked";
5366
- OAuthErrorReason["user_not_found"] = "user_not_found";
5367
- OAuthErrorReason["client_authentication_missing"] = "client_authentication_missing";
5368
- OAuthErrorReason["invalid_client_authentication_scheme"] = "invalid_client_authentication_scheme";
5369
- OAuthErrorReason["invalid_client_authentication"] = "invalid_client_authentication";
5370
- OAuthErrorReason["client_id_mismatch"] = "client_id_mismatch";
5371
- OAuthErrorReason["change_password_administrative"] = "change_password_administrative";
5372
- OAuthErrorReason["change_password_breached"] = "change_password_breached";
5373
- OAuthErrorReason["change_password_expired"] = "change_password_expired";
5374
- OAuthErrorReason["change_password_validation"] = "change_password_validation";
5375
- OAuthErrorReason["unknown"] = "unknown";
5376
- })(OAuthErrorReason = exports.OAuthErrorReason || (exports.OAuthErrorReason = {}));
5414
+ var UnverifiedBehavior;
5415
+ (function (UnverifiedBehavior) {
5416
+ UnverifiedBehavior["Allow"] = "Allow";
5417
+ UnverifiedBehavior["Gated"] = "Gated";
5418
+ })(UnverifiedBehavior = exports.UnverifiedBehavior || (exports.UnverifiedBehavior = {}));
5419
+ /**
5420
+ * The phases of a time-based user action.
5421
+ *
5422
+ * @author Brian Pontarelli
5423
+ */
5424
+ var UserActionPhase;
5425
+ (function (UserActionPhase) {
5426
+ UserActionPhase["start"] = "start";
5427
+ UserActionPhase["modify"] = "modify";
5428
+ UserActionPhase["cancel"] = "cancel";
5429
+ UserActionPhase["end"] = "end";
5430
+ })(UserActionPhase = exports.UserActionPhase || (exports.UserActionPhase = {}));
5431
+ /**
5432
+ * @author Daniel DeGroff
5433
+ */
5434
+ var LambdaEngineType;
5435
+ (function (LambdaEngineType) {
5436
+ LambdaEngineType["GraalJS"] = "GraalJS";
5437
+ LambdaEngineType["Nashorn"] = "Nashorn";
5438
+ })(LambdaEngineType = exports.LambdaEngineType || (exports.LambdaEngineType = {}));
5377
5439
  var OAuthErrorType;
5378
5440
  (function (OAuthErrorType) {
5379
5441
  OAuthErrorType["invalid_request"] = "invalid_request";
@@ -5395,118 +5457,113 @@ var OAuthErrorType;
5395
5457
  /**
5396
5458
  * @author Daniel DeGroff
5397
5459
  */
5398
- var ObjectState;
5399
- (function (ObjectState) {
5400
- ObjectState["Active"] = "Active";
5401
- ObjectState["Inactive"] = "Inactive";
5402
- ObjectState["PendingDelete"] = "PendingDelete";
5403
- })(ObjectState = exports.ObjectState || (exports.ObjectState = {}));
5404
- /**
5405
- * @author Brett Guy
5406
- */
5407
- var ProofKeyForCodeExchangePolicy;
5408
- (function (ProofKeyForCodeExchangePolicy) {
5409
- ProofKeyForCodeExchangePolicy["Required"] = "Required";
5410
- ProofKeyForCodeExchangePolicy["NotRequired"] = "NotRequired";
5411
- ProofKeyForCodeExchangePolicy["NotRequiredWhenUsingClientAuthentication"] = "NotRequiredWhenUsingClientAuthentication";
5412
- })(ProofKeyForCodeExchangePolicy = exports.ProofKeyForCodeExchangePolicy || (exports.ProofKeyForCodeExchangePolicy = {}));
5460
+ var Sort;
5461
+ (function (Sort) {
5462
+ Sort["asc"] = "asc";
5463
+ Sort["desc"] = "desc";
5464
+ })(Sort = exports.Sort || (exports.Sort = {}));
5465
+ var SAMLLogoutBehavior;
5466
+ (function (SAMLLogoutBehavior) {
5467
+ SAMLLogoutBehavior["AllParticipants"] = "AllParticipants";
5468
+ SAMLLogoutBehavior["OnlyOriginator"] = "OnlyOriginator";
5469
+ })(SAMLLogoutBehavior = exports.SAMLLogoutBehavior || (exports.SAMLLogoutBehavior = {}));
5413
5470
  /**
5414
- * Defines valid credential types. This is an extension point in the WebAuthn spec. The only defined value at this time is "public-key"
5471
+ * The IdP behavior when no user link has been made yet.
5415
5472
  *
5416
- * @author Spencer Witt
5417
- */
5418
- var PublicKeyCredentialType;
5419
- (function (PublicKeyCredentialType) {
5420
- PublicKeyCredentialType["publicKey"] = "public-key";
5421
- })(PublicKeyCredentialType = exports.PublicKeyCredentialType || (exports.PublicKeyCredentialType = {}));
5422
- /**
5423
5473
  * @author Daniel DeGroff
5424
5474
  */
5425
- var RateLimitedRequestType;
5426
- (function (RateLimitedRequestType) {
5427
- RateLimitedRequestType["FailedLogin"] = "FailedLogin";
5428
- RateLimitedRequestType["ForgotPassword"] = "ForgotPassword";
5429
- RateLimitedRequestType["SendEmailVerification"] = "SendEmailVerification";
5430
- RateLimitedRequestType["SendPasswordless"] = "SendPasswordless";
5431
- RateLimitedRequestType["SendRegistrationVerification"] = "SendRegistrationVerification";
5432
- RateLimitedRequestType["SendTwoFactor"] = "SendTwoFactor";
5433
- })(RateLimitedRequestType = exports.RateLimitedRequestType || (exports.RateLimitedRequestType = {}));
5434
- /**
5435
- * @author Brian Pontarelli
5436
- */
5437
- var ReactorFeatureStatus;
5438
- (function (ReactorFeatureStatus) {
5439
- ReactorFeatureStatus["ACTIVE"] = "ACTIVE";
5440
- ReactorFeatureStatus["DISCONNECTED"] = "DISCONNECTED";
5441
- ReactorFeatureStatus["PENDING"] = "PENDING";
5442
- ReactorFeatureStatus["DISABLED"] = "DISABLED";
5443
- ReactorFeatureStatus["UNKNOWN"] = "UNKNOWN";
5444
- })(ReactorFeatureStatus = exports.ReactorFeatureStatus || (exports.ReactorFeatureStatus = {}));
5475
+ var IdentityProviderLinkingStrategy;
5476
+ (function (IdentityProviderLinkingStrategy) {
5477
+ IdentityProviderLinkingStrategy["CreatePendingLink"] = "CreatePendingLink";
5478
+ IdentityProviderLinkingStrategy["Disabled"] = "Disabled";
5479
+ IdentityProviderLinkingStrategy["LinkAnonymously"] = "LinkAnonymously";
5480
+ IdentityProviderLinkingStrategy["LinkByEmail"] = "LinkByEmail";
5481
+ IdentityProviderLinkingStrategy["LinkByEmailForExistingUser"] = "LinkByEmailForExistingUser";
5482
+ IdentityProviderLinkingStrategy["LinkByUsername"] = "LinkByUsername";
5483
+ IdentityProviderLinkingStrategy["LinkByUsernameForExistingUser"] = "LinkByUsernameForExistingUser";
5484
+ IdentityProviderLinkingStrategy["Unsupported"] = "Unsupported";
5485
+ })(IdentityProviderLinkingStrategy = exports.IdentityProviderLinkingStrategy || (exports.IdentityProviderLinkingStrategy = {}));
5486
+ var BreachAction;
5487
+ (function (BreachAction) {
5488
+ BreachAction["Off"] = "Off";
5489
+ BreachAction["RecordOnly"] = "RecordOnly";
5490
+ BreachAction["NotifyUser"] = "NotifyUser";
5491
+ BreachAction["RequireChange"] = "RequireChange";
5492
+ })(BreachAction = exports.BreachAction || (exports.BreachAction = {}));
5445
5493
  /**
5494
+ * Event Log Type
5495
+ *
5446
5496
  * @author Daniel DeGroff
5447
5497
  */
5448
- var RefreshTokenExpirationPolicy;
5449
- (function (RefreshTokenExpirationPolicy) {
5450
- RefreshTokenExpirationPolicy["Fixed"] = "Fixed";
5451
- RefreshTokenExpirationPolicy["SlidingWindow"] = "SlidingWindow";
5452
- })(RefreshTokenExpirationPolicy = exports.RefreshTokenExpirationPolicy || (exports.RefreshTokenExpirationPolicy = {}));
5498
+ var EventLogType;
5499
+ (function (EventLogType) {
5500
+ EventLogType["Information"] = "Information";
5501
+ EventLogType["Debug"] = "Debug";
5502
+ EventLogType["Error"] = "Error";
5503
+ })(EventLogType = exports.EventLogType || (exports.EventLogType = {}));
5453
5504
  /**
5505
+ * Available JSON Web Algorithms (JWA) as described in RFC 7518 available for this JWT implementation.
5506
+ *
5454
5507
  * @author Daniel DeGroff
5455
5508
  */
5456
- var RefreshTokenUsagePolicy;
5457
- (function (RefreshTokenUsagePolicy) {
5458
- RefreshTokenUsagePolicy["Reusable"] = "Reusable";
5459
- RefreshTokenUsagePolicy["OneTimeUse"] = "OneTimeUse";
5460
- })(RefreshTokenUsagePolicy = exports.RefreshTokenUsagePolicy || (exports.RefreshTokenUsagePolicy = {}));
5461
- var RegistrationType;
5462
- (function (RegistrationType) {
5463
- RegistrationType["basic"] = "basic";
5464
- RegistrationType["advanced"] = "advanced";
5465
- })(RegistrationType = exports.RegistrationType || (exports.RegistrationType = {}));
5509
+ var Algorithm;
5510
+ (function (Algorithm) {
5511
+ Algorithm["ES256"] = "ES256";
5512
+ Algorithm["ES384"] = "ES384";
5513
+ Algorithm["ES512"] = "ES512";
5514
+ Algorithm["HS256"] = "HS256";
5515
+ Algorithm["HS384"] = "HS384";
5516
+ Algorithm["HS512"] = "HS512";
5517
+ Algorithm["PS256"] = "PS256";
5518
+ Algorithm["PS384"] = "PS384";
5519
+ Algorithm["PS512"] = "PS512";
5520
+ Algorithm["RS256"] = "RS256";
5521
+ Algorithm["RS384"] = "RS384";
5522
+ Algorithm["RS512"] = "RS512";
5523
+ Algorithm["none"] = "none";
5524
+ })(Algorithm = exports.Algorithm || (exports.Algorithm = {}));
5466
5525
  /**
5467
- * Describes the Relying Party's requirements for <a href="https://www.w3.org/TR/webauthn-2/#client-side-discoverable-credential">client-side
5468
- * discoverable credentials</a> (formerly known as "resident keys")
5526
+ * The use type of a key.
5469
5527
  *
5470
- * @author Spencer Witt
5471
- */
5472
- var ResidentKeyRequirement;
5473
- (function (ResidentKeyRequirement) {
5474
- ResidentKeyRequirement["discouraged"] = "discouraged";
5475
- ResidentKeyRequirement["preferred"] = "preferred";
5476
- ResidentKeyRequirement["required"] = "required";
5477
- })(ResidentKeyRequirement = exports.ResidentKeyRequirement || (exports.ResidentKeyRequirement = {}));
5478
- var SAMLLogoutBehavior;
5479
- (function (SAMLLogoutBehavior) {
5480
- SAMLLogoutBehavior["AllParticipants"] = "AllParticipants";
5481
- SAMLLogoutBehavior["OnlyOriginator"] = "OnlyOriginator";
5482
- })(SAMLLogoutBehavior = exports.SAMLLogoutBehavior || (exports.SAMLLogoutBehavior = {}));
5483
- /**
5484
- * @author Lyle Schemmerling
5528
+ * @author Daniel DeGroff
5485
5529
  */
5486
- var SAMLv2DestinationAssertionPolicy;
5487
- (function (SAMLv2DestinationAssertionPolicy) {
5488
- SAMLv2DestinationAssertionPolicy["Enabled"] = "Enabled";
5489
- SAMLv2DestinationAssertionPolicy["Disabled"] = "Disabled";
5490
- SAMLv2DestinationAssertionPolicy["AllowAlternates"] = "AllowAlternates";
5491
- })(SAMLv2DestinationAssertionPolicy = exports.SAMLv2DestinationAssertionPolicy || (exports.SAMLv2DestinationAssertionPolicy = {}));
5530
+ var KeyUse;
5531
+ (function (KeyUse) {
5532
+ KeyUse["SignOnly"] = "SignOnly";
5533
+ KeyUse["SignAndVerify"] = "SignAndVerify";
5534
+ KeyUse["VerifyOnly"] = "VerifyOnly";
5535
+ })(KeyUse = exports.KeyUse || (exports.KeyUse = {}));
5536
+ var FamilyRole;
5537
+ (function (FamilyRole) {
5538
+ FamilyRole["Child"] = "Child";
5539
+ FamilyRole["Teen"] = "Teen";
5540
+ FamilyRole["Adult"] = "Adult";
5541
+ })(FamilyRole = exports.FamilyRole || (exports.FamilyRole = {}));
5492
5542
  /**
5493
- * @author Daniel DeGroff
5543
+ * The transaction types for Webhooks and other event systems within FusionAuth.
5544
+ *
5545
+ * @author Brian Pontarelli
5494
5546
  */
5495
- var SecureGeneratorType;
5496
- (function (SecureGeneratorType) {
5497
- SecureGeneratorType["randomDigits"] = "randomDigits";
5498
- SecureGeneratorType["randomBytes"] = "randomBytes";
5499
- SecureGeneratorType["randomAlpha"] = "randomAlpha";
5500
- SecureGeneratorType["randomAlphaNumeric"] = "randomAlphaNumeric";
5501
- })(SecureGeneratorType = exports.SecureGeneratorType || (exports.SecureGeneratorType = {}));
5547
+ var TransactionType;
5548
+ (function (TransactionType) {
5549
+ TransactionType["None"] = "None";
5550
+ TransactionType["Any"] = "Any";
5551
+ TransactionType["SimpleMajority"] = "SimpleMajority";
5552
+ TransactionType["SuperMajority"] = "SuperMajority";
5553
+ TransactionType["AbsoluteMajority"] = "AbsoluteMajority";
5554
+ })(TransactionType = exports.TransactionType || (exports.TransactionType = {}));
5502
5555
  /**
5503
- * @author Daniel DeGroff
5556
+ * Used to express whether the Relying Party requires <a href="https://www.w3.org/TR/webauthn-2/#user-verification">user verification</a> for the
5557
+ * current operation.
5558
+ *
5559
+ * @author Spencer Witt
5504
5560
  */
5505
- var Sort;
5506
- (function (Sort) {
5507
- Sort["asc"] = "asc";
5508
- Sort["desc"] = "desc";
5509
- })(Sort = exports.Sort || (exports.Sort = {}));
5561
+ var UserVerificationRequirement;
5562
+ (function (UserVerificationRequirement) {
5563
+ UserVerificationRequirement["required"] = "required";
5564
+ UserVerificationRequirement["preferred"] = "preferred";
5565
+ UserVerificationRequirement["discouraged"] = "discouraged";
5566
+ })(UserVerificationRequirement = exports.UserVerificationRequirement || (exports.UserVerificationRequirement = {}));
5510
5567
  /**
5511
5568
  * Steam API modes.
5512
5569
  *
@@ -5518,40 +5575,137 @@ var SteamAPIMode;
5518
5575
  SteamAPIMode["Partner"] = "Partner";
5519
5576
  })(SteamAPIMode = exports.SteamAPIMode || (exports.SteamAPIMode = {}));
5520
5577
  /**
5521
- * <ul>
5522
- * <li>Bearer Token type as defined by <a href="https://tools.ietf.org/html/rfc6750">RFC 6750</a>.</li>
5523
- * <li>MAC Token type as referenced by <a href="https://tools.ietf.org/html/rfc6749">RFC 6749</a> and
5524
- * <a href="https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-05">
5525
- * Draft RFC on OAuth 2.0 Message Authentication Code (MAC) Tokens</a>
5526
- * </li>
5527
- * </ul>
5578
+ * @author Trevor Smith
5579
+ */
5580
+ var ChangePasswordReason;
5581
+ (function (ChangePasswordReason) {
5582
+ ChangePasswordReason["Administrative"] = "Administrative";
5583
+ ChangePasswordReason["Breached"] = "Breached";
5584
+ ChangePasswordReason["Expired"] = "Expired";
5585
+ ChangePasswordReason["Validation"] = "Validation";
5586
+ })(ChangePasswordReason = exports.ChangePasswordReason || (exports.ChangePasswordReason = {}));
5587
+ var EmailSecurityType;
5588
+ (function (EmailSecurityType) {
5589
+ EmailSecurityType["NONE"] = "NONE";
5590
+ EmailSecurityType["SSL"] = "SSL";
5591
+ EmailSecurityType["TLS"] = "TLS";
5592
+ })(EmailSecurityType = exports.EmailSecurityType || (exports.EmailSecurityType = {}));
5593
+ /**
5594
+ * @author Brian Pontarelli
5595
+ */
5596
+ var ExpiryUnit;
5597
+ (function (ExpiryUnit) {
5598
+ ExpiryUnit["MINUTES"] = "MINUTES";
5599
+ ExpiryUnit["HOURS"] = "HOURS";
5600
+ ExpiryUnit["DAYS"] = "DAYS";
5601
+ ExpiryUnit["WEEKS"] = "WEEKS";
5602
+ ExpiryUnit["MONTHS"] = "MONTHS";
5603
+ ExpiryUnit["YEARS"] = "YEARS";
5604
+ })(ExpiryUnit = exports.ExpiryUnit || (exports.ExpiryUnit = {}));
5605
+ /**
5606
+ * @author Brett Guy
5607
+ */
5608
+ var MessengerType;
5609
+ (function (MessengerType) {
5610
+ MessengerType["Generic"] = "Generic";
5611
+ MessengerType["Kafka"] = "Kafka";
5612
+ MessengerType["Twilio"] = "Twilio";
5613
+ })(MessengerType = exports.MessengerType || (exports.MessengerType = {}));
5614
+ /**
5615
+ * @author Daniel DeGroff
5616
+ */
5617
+ var IdentityProviderType;
5618
+ (function (IdentityProviderType) {
5619
+ IdentityProviderType["Apple"] = "Apple";
5620
+ IdentityProviderType["EpicGames"] = "EpicGames";
5621
+ IdentityProviderType["ExternalJWT"] = "ExternalJWT";
5622
+ IdentityProviderType["Facebook"] = "Facebook";
5623
+ IdentityProviderType["Google"] = "Google";
5624
+ IdentityProviderType["HYPR"] = "HYPR";
5625
+ IdentityProviderType["LinkedIn"] = "LinkedIn";
5626
+ IdentityProviderType["Nintendo"] = "Nintendo";
5627
+ IdentityProviderType["OpenIDConnect"] = "OpenIDConnect";
5628
+ IdentityProviderType["SAMLv2"] = "SAMLv2";
5629
+ IdentityProviderType["SAMLv2IdPInitiated"] = "SAMLv2IdPInitiated";
5630
+ IdentityProviderType["SonyPSN"] = "SonyPSN";
5631
+ IdentityProviderType["Steam"] = "Steam";
5632
+ IdentityProviderType["Twitch"] = "Twitch";
5633
+ IdentityProviderType["Twitter"] = "Twitter";
5634
+ IdentityProviderType["Xbox"] = "Xbox";
5635
+ })(IdentityProviderType = exports.IdentityProviderType || (exports.IdentityProviderType = {}));
5636
+ /**
5637
+ * Models the event types that FusionAuth produces.
5528
5638
  *
5529
- * @author Daniel DeGroff
5639
+ * @author Brian Pontarelli
5530
5640
  */
5531
- var TokenType;
5532
- (function (TokenType) {
5533
- TokenType["Bearer"] = "Bearer";
5534
- TokenType["MAC"] = "MAC";
5535
- })(TokenType = exports.TokenType || (exports.TokenType = {}));
5641
+ var EventType;
5642
+ (function (EventType) {
5643
+ EventType["JWTPublicKeyUpdate"] = "jwt.public-key.update";
5644
+ EventType["JWTRefreshTokenRevoke"] = "jwt.refresh-token.revoke";
5645
+ EventType["JWTRefresh"] = "jwt.refresh";
5646
+ EventType["AuditLogCreate"] = "audit-log.create";
5647
+ EventType["EventLogCreate"] = "event-log.create";
5648
+ EventType["KickstartSuccess"] = "kickstart.success";
5649
+ EventType["GroupCreate"] = "group.create";
5650
+ EventType["GroupCreateComplete"] = "group.create.complete";
5651
+ EventType["GroupDelete"] = "group.delete";
5652
+ EventType["GroupDeleteComplete"] = "group.delete.complete";
5653
+ EventType["GroupMemberAdd"] = "group.member.add";
5654
+ EventType["GroupMemberAddComplete"] = "group.member.add.complete";
5655
+ EventType["GroupMemberRemove"] = "group.member.remove";
5656
+ EventType["GroupMemberRemoveComplete"] = "group.member.remove.complete";
5657
+ EventType["GroupMemberUpdate"] = "group.member.update";
5658
+ EventType["GroupMemberUpdateComplete"] = "group.member.update.complete";
5659
+ EventType["GroupUpdate"] = "group.update";
5660
+ EventType["GroupUpdateComplete"] = "group.update.complete";
5661
+ EventType["UserAction"] = "user.action";
5662
+ EventType["UserBulkCreate"] = "user.bulk.create";
5663
+ EventType["UserCreate"] = "user.create";
5664
+ EventType["UserCreateComplete"] = "user.create.complete";
5665
+ EventType["UserDeactivate"] = "user.deactivate";
5666
+ EventType["UserDelete"] = "user.delete";
5667
+ EventType["UserDeleteComplete"] = "user.delete.complete";
5668
+ EventType["UserEmailUpdate"] = "user.email.update";
5669
+ EventType["UserEmailVerified"] = "user.email.verified";
5670
+ EventType["UserIdentityProviderLink"] = "user.identity-provider.link";
5671
+ EventType["UserIdentityProviderUnlink"] = "user.identity-provider.unlink";
5672
+ EventType["UserLoginIdDuplicateOnCreate"] = "user.loginId.duplicate.create";
5673
+ EventType["UserLoginIdDuplicateOnUpdate"] = "user.loginId.duplicate.update";
5674
+ EventType["UserLoginFailed"] = "user.login.failed";
5675
+ EventType["UserLoginNewDevice"] = "user.login.new-device";
5676
+ EventType["UserLoginSuccess"] = "user.login.success";
5677
+ EventType["UserLoginSuspicious"] = "user.login.suspicious";
5678
+ EventType["UserPasswordBreach"] = "user.password.breach";
5679
+ EventType["UserPasswordResetSend"] = "user.password.reset.send";
5680
+ EventType["UserPasswordResetStart"] = "user.password.reset.start";
5681
+ EventType["UserPasswordResetSuccess"] = "user.password.reset.success";
5682
+ EventType["UserPasswordUpdate"] = "user.password.update";
5683
+ EventType["UserReactivate"] = "user.reactivate";
5684
+ EventType["UserRegistrationCreate"] = "user.registration.create";
5685
+ EventType["UserRegistrationCreateComplete"] = "user.registration.create.complete";
5686
+ EventType["UserRegistrationDelete"] = "user.registration.delete";
5687
+ EventType["UserRegistrationDeleteComplete"] = "user.registration.delete.complete";
5688
+ EventType["UserRegistrationUpdate"] = "user.registration.update";
5689
+ EventType["UserRegistrationUpdateComplete"] = "user.registration.update.complete";
5690
+ EventType["UserRegistrationVerified"] = "user.registration.verified";
5691
+ EventType["UserTwoFactorMethodAdd"] = "user.two-factor.method.add";
5692
+ EventType["UserTwoFactorMethodRemove"] = "user.two-factor.method.remove";
5693
+ EventType["UserUpdate"] = "user.update";
5694
+ EventType["UserUpdateComplete"] = "user.update.complete";
5695
+ EventType["Test"] = "test";
5696
+ })(EventType = exports.EventType || (exports.EventType = {}));
5536
5697
  var TOTPAlgorithm;
5537
5698
  (function (TOTPAlgorithm) {
5538
5699
  TOTPAlgorithm["HmacSHA1"] = "HmacSHA1";
5539
5700
  TOTPAlgorithm["HmacSHA256"] = "HmacSHA256";
5540
5701
  TOTPAlgorithm["HmacSHA512"] = "HmacSHA512";
5541
5702
  })(TOTPAlgorithm = exports.TOTPAlgorithm || (exports.TOTPAlgorithm = {}));
5542
- /**
5543
- * The transaction types for Webhooks and other event systems within FusionAuth.
5544
- *
5545
- * @author Brian Pontarelli
5546
- */
5547
- var TransactionType;
5548
- (function (TransactionType) {
5549
- TransactionType["None"] = "None";
5550
- TransactionType["Any"] = "Any";
5551
- TransactionType["SimpleMajority"] = "SimpleMajority";
5552
- TransactionType["SuperMajority"] = "SuperMajority";
5553
- TransactionType["AbsoluteMajority"] = "AbsoluteMajority";
5554
- })(TransactionType = exports.TransactionType || (exports.TransactionType = {}));
5703
+ var LDAPSecurityMethod;
5704
+ (function (LDAPSecurityMethod) {
5705
+ LDAPSecurityMethod["None"] = "None";
5706
+ LDAPSecurityMethod["LDAPS"] = "LDAPS";
5707
+ LDAPSecurityMethod["StartTLS"] = "StartTLS";
5708
+ })(LDAPSecurityMethod = exports.LDAPSecurityMethod || (exports.LDAPSecurityMethod = {}));
5555
5709
  var UniqueUsernameStrategy;
5556
5710
  (function (UniqueUsernameStrategy) {
5557
5711
  UniqueUsernameStrategy["Always"] = "Always";
@@ -5560,53 +5714,61 @@ var UniqueUsernameStrategy;
5560
5714
  /**
5561
5715
  * @author Daniel DeGroff
5562
5716
  */
5563
- var UnverifiedBehavior;
5564
- (function (UnverifiedBehavior) {
5565
- UnverifiedBehavior["Allow"] = "Allow";
5566
- UnverifiedBehavior["Gated"] = "Gated";
5567
- })(UnverifiedBehavior = exports.UnverifiedBehavior || (exports.UnverifiedBehavior = {}));
5717
+ var VerificationStrategy;
5718
+ (function (VerificationStrategy) {
5719
+ VerificationStrategy["ClickableLink"] = "ClickableLink";
5720
+ VerificationStrategy["FormField"] = "FormField";
5721
+ })(VerificationStrategy = exports.VerificationStrategy || (exports.VerificationStrategy = {}));
5568
5722
  /**
5569
- * The phases of a time-based user action.
5723
+ * @author Daniel DeGroff
5724
+ */
5725
+ var SecureGeneratorType;
5726
+ (function (SecureGeneratorType) {
5727
+ SecureGeneratorType["randomDigits"] = "randomDigits";
5728
+ SecureGeneratorType["randomBytes"] = "randomBytes";
5729
+ SecureGeneratorType["randomAlpha"] = "randomAlpha";
5730
+ SecureGeneratorType["randomAlphaNumeric"] = "randomAlphaNumeric";
5731
+ })(SecureGeneratorType = exports.SecureGeneratorType || (exports.SecureGeneratorType = {}));
5732
+ /**
5733
+ * XML canonicalization method enumeration. This is used for the IdP and SP side of FusionAuth SAML.
5570
5734
  *
5571
5735
  * @author Brian Pontarelli
5572
5736
  */
5573
- var UserActionPhase;
5574
- (function (UserActionPhase) {
5575
- UserActionPhase["start"] = "start";
5576
- UserActionPhase["modify"] = "modify";
5577
- UserActionPhase["cancel"] = "cancel";
5578
- UserActionPhase["end"] = "end";
5579
- })(UserActionPhase = exports.UserActionPhase || (exports.UserActionPhase = {}));
5737
+ var CanonicalizationMethod;
5738
+ (function (CanonicalizationMethod) {
5739
+ CanonicalizationMethod["exclusive"] = "exclusive";
5740
+ CanonicalizationMethod["exclusive_with_comments"] = "exclusive_with_comments";
5741
+ CanonicalizationMethod["inclusive"] = "inclusive";
5742
+ CanonicalizationMethod["inclusive_with_comments"] = "inclusive_with_comments";
5743
+ })(CanonicalizationMethod = exports.CanonicalizationMethod || (exports.CanonicalizationMethod = {}));
5580
5744
  /**
5581
5745
  * @author Daniel DeGroff
5582
5746
  */
5583
- var UserState;
5584
- (function (UserState) {
5585
- UserState["Authenticated"] = "Authenticated";
5586
- UserState["AuthenticatedNotRegistered"] = "AuthenticatedNotRegistered";
5587
- UserState["AuthenticatedNotVerified"] = "AuthenticatedNotVerified";
5588
- UserState["AuthenticatedRegistrationNotVerified"] = "AuthenticatedRegistrationNotVerified";
5589
- })(UserState = exports.UserState || (exports.UserState = {}));
5747
+ var RateLimitedRequestType;
5748
+ (function (RateLimitedRequestType) {
5749
+ RateLimitedRequestType["FailedLogin"] = "FailedLogin";
5750
+ RateLimitedRequestType["ForgotPassword"] = "ForgotPassword";
5751
+ RateLimitedRequestType["SendEmailVerification"] = "SendEmailVerification";
5752
+ RateLimitedRequestType["SendPasswordless"] = "SendPasswordless";
5753
+ RateLimitedRequestType["SendRegistrationVerification"] = "SendRegistrationVerification";
5754
+ RateLimitedRequestType["SendTwoFactor"] = "SendTwoFactor";
5755
+ })(RateLimitedRequestType = exports.RateLimitedRequestType || (exports.RateLimitedRequestType = {}));
5590
5756
  /**
5591
- * Used to express whether the Relying Party requires <a href="https://www.w3.org/TR/webauthn-2/#user-verification">user verification</a> for the
5592
- * current operation.
5593
- *
5594
- * @author Spencer Witt
5757
+ * @author Matthew Altman
5595
5758
  */
5596
- var UserVerificationRequirement;
5597
- (function (UserVerificationRequirement) {
5598
- UserVerificationRequirement["required"] = "required";
5599
- UserVerificationRequirement["preferred"] = "preferred";
5600
- UserVerificationRequirement["discouraged"] = "discouraged";
5601
- })(UserVerificationRequirement = exports.UserVerificationRequirement || (exports.UserVerificationRequirement = {}));
5759
+ var LogoutBehavior;
5760
+ (function (LogoutBehavior) {
5761
+ LogoutBehavior["RedirectOnly"] = "RedirectOnly";
5762
+ LogoutBehavior["AllApplications"] = "AllApplications";
5763
+ })(LogoutBehavior = exports.LogoutBehavior || (exports.LogoutBehavior = {}));
5602
5764
  /**
5603
- * @author Daniel DeGroff
5765
+ * @author Johnathon Wood
5604
5766
  */
5605
- var VerificationStrategy;
5606
- (function (VerificationStrategy) {
5607
- VerificationStrategy["ClickableLink"] = "ClickableLink";
5608
- VerificationStrategy["FormField"] = "FormField";
5609
- })(VerificationStrategy = exports.VerificationStrategy || (exports.VerificationStrategy = {}));
5767
+ var Oauth2AuthorizedURLValidationPolicy;
5768
+ (function (Oauth2AuthorizedURLValidationPolicy) {
5769
+ Oauth2AuthorizedURLValidationPolicy["AllowWildcards"] = "AllowWildcards";
5770
+ Oauth2AuthorizedURLValidationPolicy["ExactMatch"] = "ExactMatch";
5771
+ })(Oauth2AuthorizedURLValidationPolicy = exports.Oauth2AuthorizedURLValidationPolicy || (exports.Oauth2AuthorizedURLValidationPolicy = {}));
5610
5772
  /**
5611
5773
  * Identifies the WebAuthn workflow. This will affect the parameters used for credential creation
5612
5774
  * and request based on the Tenant configuration.
@@ -5619,9 +5781,79 @@ var WebAuthnWorkflow;
5619
5781
  WebAuthnWorkflow["general"] = "general";
5620
5782
  WebAuthnWorkflow["reauthentication"] = "reauthentication";
5621
5783
  })(WebAuthnWorkflow = exports.WebAuthnWorkflow || (exports.WebAuthnWorkflow = {}));
5622
- var XMLSignatureLocation;
5623
- (function (XMLSignatureLocation) {
5624
- XMLSignatureLocation["Assertion"] = "Assertion";
5625
- XMLSignatureLocation["Response"] = "Response";
5626
- })(XMLSignatureLocation = exports.XMLSignatureLocation || (exports.XMLSignatureLocation = {}));
5784
+ var OAuthErrorReason;
5785
+ (function (OAuthErrorReason) {
5786
+ OAuthErrorReason["auth_code_not_found"] = "auth_code_not_found";
5787
+ OAuthErrorReason["access_token_malformed"] = "access_token_malformed";
5788
+ OAuthErrorReason["access_token_expired"] = "access_token_expired";
5789
+ OAuthErrorReason["access_token_unavailable_for_processing"] = "access_token_unavailable_for_processing";
5790
+ OAuthErrorReason["access_token_failed_processing"] = "access_token_failed_processing";
5791
+ OAuthErrorReason["access_token_invalid"] = "access_token_invalid";
5792
+ OAuthErrorReason["refresh_token_not_found"] = "refresh_token_not_found";
5793
+ OAuthErrorReason["refresh_token_type_not_supported"] = "refresh_token_type_not_supported";
5794
+ OAuthErrorReason["invalid_client_id"] = "invalid_client_id";
5795
+ OAuthErrorReason["invalid_user_credentials"] = "invalid_user_credentials";
5796
+ OAuthErrorReason["invalid_grant_type"] = "invalid_grant_type";
5797
+ OAuthErrorReason["invalid_origin"] = "invalid_origin";
5798
+ OAuthErrorReason["invalid_origin_opaque"] = "invalid_origin_opaque";
5799
+ OAuthErrorReason["invalid_pkce_code_verifier"] = "invalid_pkce_code_verifier";
5800
+ OAuthErrorReason["invalid_pkce_code_challenge"] = "invalid_pkce_code_challenge";
5801
+ OAuthErrorReason["invalid_pkce_code_challenge_method"] = "invalid_pkce_code_challenge_method";
5802
+ OAuthErrorReason["invalid_redirect_uri"] = "invalid_redirect_uri";
5803
+ OAuthErrorReason["invalid_response_mode"] = "invalid_response_mode";
5804
+ OAuthErrorReason["invalid_response_type"] = "invalid_response_type";
5805
+ OAuthErrorReason["invalid_id_token_hint"] = "invalid_id_token_hint";
5806
+ OAuthErrorReason["invalid_post_logout_redirect_uri"] = "invalid_post_logout_redirect_uri";
5807
+ OAuthErrorReason["invalid_device_code"] = "invalid_device_code";
5808
+ OAuthErrorReason["invalid_user_code"] = "invalid_user_code";
5809
+ OAuthErrorReason["invalid_additional_client_id"] = "invalid_additional_client_id";
5810
+ OAuthErrorReason["invalid_target_entity_scope"] = "invalid_target_entity_scope";
5811
+ OAuthErrorReason["invalid_entity_permission_scope"] = "invalid_entity_permission_scope";
5812
+ OAuthErrorReason["invalid_user_id"] = "invalid_user_id";
5813
+ OAuthErrorReason["grant_type_disabled"] = "grant_type_disabled";
5814
+ OAuthErrorReason["missing_client_id"] = "missing_client_id";
5815
+ OAuthErrorReason["missing_client_secret"] = "missing_client_secret";
5816
+ OAuthErrorReason["missing_code"] = "missing_code";
5817
+ OAuthErrorReason["missing_code_challenge"] = "missing_code_challenge";
5818
+ OAuthErrorReason["missing_code_verifier"] = "missing_code_verifier";
5819
+ OAuthErrorReason["missing_device_code"] = "missing_device_code";
5820
+ OAuthErrorReason["missing_grant_type"] = "missing_grant_type";
5821
+ OAuthErrorReason["missing_redirect_uri"] = "missing_redirect_uri";
5822
+ OAuthErrorReason["missing_refresh_token"] = "missing_refresh_token";
5823
+ OAuthErrorReason["missing_response_type"] = "missing_response_type";
5824
+ OAuthErrorReason["missing_token"] = "missing_token";
5825
+ OAuthErrorReason["missing_user_code"] = "missing_user_code";
5826
+ OAuthErrorReason["missing_user_id"] = "missing_user_id";
5827
+ OAuthErrorReason["missing_verification_uri"] = "missing_verification_uri";
5828
+ OAuthErrorReason["login_prevented"] = "login_prevented";
5829
+ OAuthErrorReason["not_licensed"] = "not_licensed";
5830
+ OAuthErrorReason["user_code_expired"] = "user_code_expired";
5831
+ OAuthErrorReason["user_expired"] = "user_expired";
5832
+ OAuthErrorReason["user_locked"] = "user_locked";
5833
+ OAuthErrorReason["user_not_found"] = "user_not_found";
5834
+ OAuthErrorReason["client_authentication_missing"] = "client_authentication_missing";
5835
+ OAuthErrorReason["invalid_client_authentication_scheme"] = "invalid_client_authentication_scheme";
5836
+ OAuthErrorReason["invalid_client_authentication"] = "invalid_client_authentication";
5837
+ OAuthErrorReason["client_id_mismatch"] = "client_id_mismatch";
5838
+ OAuthErrorReason["change_password_administrative"] = "change_password_administrative";
5839
+ OAuthErrorReason["change_password_breached"] = "change_password_breached";
5840
+ OAuthErrorReason["change_password_expired"] = "change_password_expired";
5841
+ OAuthErrorReason["change_password_validation"] = "change_password_validation";
5842
+ OAuthErrorReason["unknown"] = "unknown";
5843
+ })(OAuthErrorReason = exports.OAuthErrorReason || (exports.OAuthErrorReason = {}));
5844
+ var ClientAuthenticationMethod;
5845
+ (function (ClientAuthenticationMethod) {
5846
+ ClientAuthenticationMethod["none"] = "none";
5847
+ ClientAuthenticationMethod["client_secret_basic"] = "client_secret_basic";
5848
+ ClientAuthenticationMethod["client_secret_post"] = "client_secret_post";
5849
+ })(ClientAuthenticationMethod = exports.ClientAuthenticationMethod || (exports.ClientAuthenticationMethod = {}));
5850
+ /**
5851
+ * @author Brett Pontarelli
5852
+ */
5853
+ var IdentityProviderLoginMethod;
5854
+ (function (IdentityProviderLoginMethod) {
5855
+ IdentityProviderLoginMethod["UsePopup"] = "UsePopup";
5856
+ IdentityProviderLoginMethod["UseRedirect"] = "UseRedirect";
5857
+ IdentityProviderLoginMethod["UseVendorJavaScript"] = "UseVendorJavaScript";
5858
+ })(IdentityProviderLoginMethod = exports.IdentityProviderLoginMethod || (exports.IdentityProviderLoginMethod = {}));
5627
5859
  //# sourceMappingURL=FusionAuthClient.js.map