@greensecurity/javascript-sdk 0.45.0-beta.16 → 0.45.0-beta.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (139) hide show
  1. package/dist/commonjs/__tests__/vendors.test.js +1 -1
  2. package/dist/commonjs/__tests__/vendors.test.js.map +1 -1
  3. package/dist/commonjs/__tests__/webhooks.test.js +1 -1
  4. package/dist/commonjs/__tests__/webhooks.test.js.map +1 -1
  5. package/dist/commonjs/__tests__/zones.test.js +2 -9
  6. package/dist/commonjs/__tests__/zones.test.js.map +1 -1
  7. package/dist/commonjs/funcs/usersPostAuthenticate.d.ts +37 -0
  8. package/dist/commonjs/funcs/usersPostAuthenticate.d.ts.map +1 -1
  9. package/dist/commonjs/funcs/usersPostAuthenticate.js +37 -0
  10. package/dist/commonjs/funcs/usersPostAuthenticate.js.map +1 -1
  11. package/dist/commonjs/lib/config.d.ts +2 -2
  12. package/dist/commonjs/lib/config.js +2 -2
  13. package/dist/commonjs/models/components/authenticatesuccessresponse.d.ts +91 -0
  14. package/dist/commonjs/models/components/authenticatesuccessresponse.d.ts.map +1 -0
  15. package/dist/commonjs/models/components/authenticatesuccessresponse.js +100 -0
  16. package/dist/commonjs/models/components/authenticatesuccessresponse.js.map +1 -0
  17. package/dist/commonjs/models/components/index.d.ts +2 -0
  18. package/dist/commonjs/models/components/index.d.ts.map +1 -1
  19. package/dist/commonjs/models/components/index.js +2 -0
  20. package/dist/commonjs/models/components/index.js.map +1 -1
  21. package/dist/commonjs/models/components/loginemailandpassword.d.ts +34 -0
  22. package/dist/commonjs/models/components/loginemailandpassword.d.ts.map +1 -1
  23. package/dist/commonjs/models/components/loginemailandpassword.js +2 -0
  24. package/dist/commonjs/models/components/loginemailandpassword.js.map +1 -1
  25. package/dist/commonjs/models/components/loginrequirementsfromemail.d.ts +34 -0
  26. package/dist/commonjs/models/components/loginrequirementsfromemail.d.ts.map +1 -1
  27. package/dist/commonjs/models/components/loginrequirementsfromemail.js +2 -0
  28. package/dist/commonjs/models/components/loginrequirementsfromemail.js.map +1 -1
  29. package/dist/commonjs/models/components/mfarequiredresponse.d.ts +33 -0
  30. package/dist/commonjs/models/components/mfarequiredresponse.d.ts.map +1 -1
  31. package/dist/commonjs/models/components/mfarequiredresponse.js +2 -0
  32. package/dist/commonjs/models/components/mfarequiredresponse.js.map +1 -1
  33. package/dist/commonjs/models/components/passwordnotsetresponse.d.ts +34 -1
  34. package/dist/commonjs/models/components/passwordnotsetresponse.d.ts.map +1 -1
  35. package/dist/commonjs/models/components/passwordnotsetresponse.js +2 -0
  36. package/dist/commonjs/models/components/passwordnotsetresponse.js.map +1 -1
  37. package/dist/commonjs/models/components/passwordrequiredresponse.d.ts +33 -0
  38. package/dist/commonjs/models/components/passwordrequiredresponse.d.ts.map +1 -1
  39. package/dist/commonjs/models/components/passwordrequiredresponse.js +6 -0
  40. package/dist/commonjs/models/components/passwordrequiredresponse.js.map +1 -1
  41. package/dist/commonjs/models/components/samlloginrequiredresponse.d.ts +33 -0
  42. package/dist/commonjs/models/components/samlloginrequiredresponse.d.ts.map +1 -1
  43. package/dist/commonjs/models/components/samlloginrequiredresponse.js +2 -0
  44. package/dist/commonjs/models/components/samlloginrequiredresponse.js.map +1 -1
  45. package/dist/commonjs/models/components/ssocontinuation.d.ts +44 -0
  46. package/dist/commonjs/models/components/ssocontinuation.d.ts.map +1 -0
  47. package/dist/commonjs/models/components/ssocontinuation.js +56 -0
  48. package/dist/commonjs/models/components/ssocontinuation.js.map +1 -0
  49. package/dist/commonjs/models/operations/postauthenticate.d.ts +1 -1
  50. package/dist/commonjs/models/operations/postauthenticate.d.ts.map +1 -1
  51. package/dist/commonjs/models/operations/postauthenticate.js +1 -1
  52. package/dist/commonjs/models/operations/postauthenticate.js.map +1 -1
  53. package/dist/commonjs/react-query/usersPostAuthenticate.d.ts +37 -0
  54. package/dist/commonjs/react-query/usersPostAuthenticate.d.ts.map +1 -1
  55. package/dist/commonjs/react-query/usersPostAuthenticate.js +37 -0
  56. package/dist/commonjs/react-query/usersPostAuthenticate.js.map +1 -1
  57. package/dist/commonjs/sdk/users.d.ts +37 -0
  58. package/dist/commonjs/sdk/users.d.ts.map +1 -1
  59. package/dist/commonjs/sdk/users.js +37 -0
  60. package/dist/commonjs/sdk/users.js.map +1 -1
  61. package/dist/esm/__tests__/vendors.test.js +1 -1
  62. package/dist/esm/__tests__/vendors.test.js.map +1 -1
  63. package/dist/esm/__tests__/webhooks.test.js +1 -1
  64. package/dist/esm/__tests__/webhooks.test.js.map +1 -1
  65. package/dist/esm/__tests__/zones.test.js +2 -9
  66. package/dist/esm/__tests__/zones.test.js.map +1 -1
  67. package/dist/esm/funcs/usersPostAuthenticate.d.ts +37 -0
  68. package/dist/esm/funcs/usersPostAuthenticate.d.ts.map +1 -1
  69. package/dist/esm/funcs/usersPostAuthenticate.js +37 -0
  70. package/dist/esm/funcs/usersPostAuthenticate.js.map +1 -1
  71. package/dist/esm/lib/config.d.ts +2 -2
  72. package/dist/esm/lib/config.js +2 -2
  73. package/dist/esm/models/components/authenticatesuccessresponse.d.ts +91 -0
  74. package/dist/esm/models/components/authenticatesuccessresponse.d.ts.map +1 -0
  75. package/dist/esm/models/components/authenticatesuccessresponse.js +61 -0
  76. package/dist/esm/models/components/authenticatesuccessresponse.js.map +1 -0
  77. package/dist/esm/models/components/index.d.ts +2 -0
  78. package/dist/esm/models/components/index.d.ts.map +1 -1
  79. package/dist/esm/models/components/index.js +2 -0
  80. package/dist/esm/models/components/index.js.map +1 -1
  81. package/dist/esm/models/components/loginemailandpassword.d.ts +34 -0
  82. package/dist/esm/models/components/loginemailandpassword.d.ts.map +1 -1
  83. package/dist/esm/models/components/loginemailandpassword.js +2 -0
  84. package/dist/esm/models/components/loginemailandpassword.js.map +1 -1
  85. package/dist/esm/models/components/loginrequirementsfromemail.d.ts +34 -0
  86. package/dist/esm/models/components/loginrequirementsfromemail.d.ts.map +1 -1
  87. package/dist/esm/models/components/loginrequirementsfromemail.js +2 -0
  88. package/dist/esm/models/components/loginrequirementsfromemail.js.map +1 -1
  89. package/dist/esm/models/components/mfarequiredresponse.d.ts +33 -0
  90. package/dist/esm/models/components/mfarequiredresponse.d.ts.map +1 -1
  91. package/dist/esm/models/components/mfarequiredresponse.js +2 -0
  92. package/dist/esm/models/components/mfarequiredresponse.js.map +1 -1
  93. package/dist/esm/models/components/passwordnotsetresponse.d.ts +34 -1
  94. package/dist/esm/models/components/passwordnotsetresponse.d.ts.map +1 -1
  95. package/dist/esm/models/components/passwordnotsetresponse.js +2 -0
  96. package/dist/esm/models/components/passwordnotsetresponse.js.map +1 -1
  97. package/dist/esm/models/components/passwordrequiredresponse.d.ts +33 -0
  98. package/dist/esm/models/components/passwordrequiredresponse.d.ts.map +1 -1
  99. package/dist/esm/models/components/passwordrequiredresponse.js +6 -0
  100. package/dist/esm/models/components/passwordrequiredresponse.js.map +1 -1
  101. package/dist/esm/models/components/samlloginrequiredresponse.d.ts +33 -0
  102. package/dist/esm/models/components/samlloginrequiredresponse.d.ts.map +1 -1
  103. package/dist/esm/models/components/samlloginrequiredresponse.js +2 -0
  104. package/dist/esm/models/components/samlloginrequiredresponse.js.map +1 -1
  105. package/dist/esm/models/components/ssocontinuation.d.ts +44 -0
  106. package/dist/esm/models/components/ssocontinuation.d.ts.map +1 -0
  107. package/dist/esm/models/components/ssocontinuation.js +19 -0
  108. package/dist/esm/models/components/ssocontinuation.js.map +1 -0
  109. package/dist/esm/models/operations/postauthenticate.d.ts +1 -1
  110. package/dist/esm/models/operations/postauthenticate.d.ts.map +1 -1
  111. package/dist/esm/models/operations/postauthenticate.js +1 -1
  112. package/dist/esm/models/operations/postauthenticate.js.map +1 -1
  113. package/dist/esm/react-query/usersPostAuthenticate.d.ts +37 -0
  114. package/dist/esm/react-query/usersPostAuthenticate.d.ts.map +1 -1
  115. package/dist/esm/react-query/usersPostAuthenticate.js +37 -0
  116. package/dist/esm/react-query/usersPostAuthenticate.js.map +1 -1
  117. package/dist/esm/sdk/users.d.ts +37 -0
  118. package/dist/esm/sdk/users.d.ts.map +1 -1
  119. package/dist/esm/sdk/users.js +37 -0
  120. package/dist/esm/sdk/users.js.map +1 -1
  121. package/jsr.json +1 -1
  122. package/package.json +1 -1
  123. package/src/__tests__/vendors.test.ts +1 -1
  124. package/src/__tests__/webhooks.test.ts +1 -1
  125. package/src/__tests__/zones.test.ts +2 -9
  126. package/src/funcs/usersPostAuthenticate.ts +37 -0
  127. package/src/lib/config.ts +2 -2
  128. package/src/models/components/authenticatesuccessresponse.ts +189 -0
  129. package/src/models/components/index.ts +2 -0
  130. package/src/models/components/loginemailandpassword.ts +36 -0
  131. package/src/models/components/loginrequirementsfromemail.ts +36 -0
  132. package/src/models/components/mfarequiredresponse.ts +35 -0
  133. package/src/models/components/passwordnotsetresponse.ts +36 -1
  134. package/src/models/components/passwordrequiredresponse.ts +39 -0
  135. package/src/models/components/samlloginrequiredresponse.ts +35 -0
  136. package/src/models/components/ssocontinuation.ts +71 -0
  137. package/src/models/operations/postauthenticate.ts +2 -2
  138. package/src/react-query/usersPostAuthenticate.ts +37 -0
  139. package/src/sdk/users.ts +37 -0
@@ -35,8 +35,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
35
35
  export declare const SDK_METADATA: {
36
36
  readonly language: "typescript";
37
37
  readonly openapiDocVersion: "0.45.0";
38
- readonly sdkVersion: "0.45.0-beta.16";
38
+ readonly sdkVersion: "0.45.0-beta.17";
39
39
  readonly genVersion: "2.935.1";
40
- readonly userAgent: "speakeasy-sdk/typescript 0.45.0-beta.16 2.935.1 0.45.0 @greensecurity/javascript-sdk";
40
+ readonly userAgent: "speakeasy-sdk/typescript 0.45.0-beta.17 2.935.1 0.45.0 @greensecurity/javascript-sdk";
41
41
  };
42
42
  //# sourceMappingURL=config.d.ts.map
@@ -39,8 +39,8 @@ export function serverURLFromOptions(options) {
39
39
  export const SDK_METADATA = {
40
40
  language: "typescript",
41
41
  openapiDocVersion: "0.45.0",
42
- sdkVersion: "0.45.0-beta.16",
42
+ sdkVersion: "0.45.0-beta.17",
43
43
  genVersion: "2.935.1",
44
- userAgent: "speakeasy-sdk/typescript 0.45.0-beta.16 2.935.1 0.45.0 @greensecurity/javascript-sdk",
44
+ userAgent: "speakeasy-sdk/typescript 0.45.0-beta.17 2.935.1 0.45.0 @greensecurity/javascript-sdk",
45
45
  };
46
46
  //# sourceMappingURL=config.js.map
@@ -0,0 +1,91 @@
1
+ import * as z from "zod/v3";
2
+ import { OpenEnum } from "../../types/enums.js";
3
+ import { Result as SafeParseResult } from "../../types/fp.js";
4
+ import { SDKValidationError } from "../errors/sdkvalidationerror.js";
5
+ import { Company } from "./company.js";
6
+ import { Contact } from "./contact.js";
7
+ import { SsoContinuation } from "./ssocontinuation.js";
8
+ import { UserDetails } from "./userdetails.js";
9
+ import { Vendor } from "./vendor.js";
10
+ /**
11
+ * A `permanent` user token can be used to access any API endpoint as the logged in user. A `one time` token is used to authenticate the user once.
12
+ */
13
+ export declare const AuthenticateSuccessResponseTokenType: {
14
+ readonly Permanent: "permanent";
15
+ readonly OneTime: "one time";
16
+ };
17
+ /**
18
+ * A `permanent` user token can be used to access any API endpoint as the logged in user. A `one time` token is used to authenticate the user once.
19
+ */
20
+ export type AuthenticateSuccessResponseTokenType = OpenEnum<typeof AuthenticateSuccessResponseTokenType>;
21
+ export type AuthenticateSuccessResponseUserToken = {
22
+ /**
23
+ * This token can be passed in authorization headers for this user.
24
+ */
25
+ token: string;
26
+ /**
27
+ * A `permanent` user token can be used to access any API endpoint as the logged in user. A `one time` token is used to authenticate the user once.
28
+ */
29
+ tokenType: AuthenticateSuccessResponseTokenType;
30
+ };
31
+ export type AuthenticateSuccessResponseInventoryManager = {};
32
+ /**
33
+ * A completed login. Identical to the `User` object returned everywhere
34
+ *
35
+ * @remarks
36
+ * else, plus an `sso` object when the request carried a valid `sso_state`
37
+ * and the login therefore has a SAML flow waiting to be finished.
38
+ */
39
+ export type AuthenticateSuccessResponse = {
40
+ /**
41
+ * A `gatekeeper` is a special type of service user. This type of service user is assigned to Kiosks and Apps to verify Vendors using APIs that have some access to facility data.
42
+ */
43
+ isGatekeeper?: boolean | undefined;
44
+ success: boolean;
45
+ /**
46
+ * Core user profile fields returned by user detail and update endpoints.
47
+ */
48
+ user: UserDetails;
49
+ userToken: AuthenticateSuccessResponseUserToken;
50
+ /**
51
+ * Vendor details
52
+ */
53
+ vendor?: Vendor | undefined;
54
+ inventoryManager?: AuthenticateSuccessResponseInventoryManager | undefined;
55
+ /**
56
+ * This object represents a contact at the system or facility level. Use it to verify vendors, create appointments, or check in visitors.
57
+ */
58
+ contact?: Contact | null | undefined;
59
+ /**
60
+ * A simplified representation of a Company, typically used in list views.
61
+ */
62
+ company?: Company | null | undefined;
63
+ /**
64
+ * Where to send the browser to finish a "Login with Green Security" flow.
65
+ *
66
+ * @remarks
67
+ *
68
+ * Present on a `200` from `POST /users/authenticate` only when the request
69
+ * carried a valid, unexpired `sso_state`. Its absence means the login
70
+ * succeeded but the SAML flow did not resume — treat the login as an
71
+ * ordinary one rather than retrying.
72
+ *
73
+ * This object is additive. The login itself is unaffected by it: the
74
+ * caller's own permanent token is in `user_token` exactly as it would be on
75
+ * any other successful authentication, and it is not the token embedded in
76
+ * `continue_url`.
77
+ */
78
+ sso?: SsoContinuation | undefined;
79
+ };
80
+ /** @internal */
81
+ export declare const AuthenticateSuccessResponseTokenType$inboundSchema: z.ZodType<AuthenticateSuccessResponseTokenType, z.ZodTypeDef, unknown>;
82
+ /** @internal */
83
+ export declare const AuthenticateSuccessResponseUserToken$inboundSchema: z.ZodType<AuthenticateSuccessResponseUserToken, z.ZodTypeDef, unknown>;
84
+ export declare function authenticateSuccessResponseUserTokenFromJSON(jsonString: string): SafeParseResult<AuthenticateSuccessResponseUserToken, SDKValidationError>;
85
+ /** @internal */
86
+ export declare const AuthenticateSuccessResponseInventoryManager$inboundSchema: z.ZodType<AuthenticateSuccessResponseInventoryManager, z.ZodTypeDef, unknown>;
87
+ export declare function authenticateSuccessResponseInventoryManagerFromJSON(jsonString: string): SafeParseResult<AuthenticateSuccessResponseInventoryManager, SDKValidationError>;
88
+ /** @internal */
89
+ export declare const AuthenticateSuccessResponse$inboundSchema: z.ZodType<AuthenticateSuccessResponse, z.ZodTypeDef, unknown>;
90
+ export declare function authenticateSuccessResponseFromJSON(jsonString: string): SafeParseResult<AuthenticateSuccessResponse, SDKValidationError>;
91
+ //# sourceMappingURL=authenticatesuccessresponse.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"authenticatesuccessresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/authenticatesuccessresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,OAAO,EAAyB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAyB,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,eAAe,EAEhB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAA6B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAwB,MAAM,aAAa,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;CAGvC,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CACzD,OAAO,oCAAoC,CAC5C,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,oCAAoC,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG,EAAE,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oCAAoC,CAAC;IAChD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,gBAAgB,CAAC,EAAE,2CAA2C,GAAG,SAAS,CAAC;IAC3E;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC;;;;;;;;;;;;;;OAcG;IACH,GAAG,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,kDAAkD,EAAE,CAAC,CAAC,OAAO,CACxE,oCAAoC,EACpC,CAAC,CAAC,UAAU,EACZ,OAAO,CACwD,CAAC;AAElE,gBAAgB;AAChB,eAAO,MAAM,kDAAkD,EAAE,CAAC,CAAC,OAAO,CACxE,oCAAoC,EACpC,CAAC,CAAC,UAAU,EACZ,OAAO,CAUP,CAAC;AAEH,wBAAgB,4CAA4C,CAC1D,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,oCAAoC,EAAE,kBAAkB,CAAC,CAO3E;AAED,gBAAgB;AAChB,eAAO,MAAM,yDAAyD,EACpE,CAAC,CAAC,OAAO,CACP,2CAA2C,EAC3C,CAAC,CAAC,UAAU,EACZ,OAAO,CACO,CAAC;AAEnB,wBAAgB,mDAAmD,CACjE,UAAU,EAAE,MAAM,GACjB,eAAe,CAChB,2CAA2C,EAC3C,kBAAkB,CACnB,CASA;AAED,gBAAgB;AAChB,eAAO,MAAM,yCAAyC,EAAE,CAAC,CAAC,OAAO,CAC/D,2BAA2B,EAC3B,CAAC,CAAC,UAAU,EACZ,OAAO,CAmBP,CAAC;AAEH,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAMlE"}
@@ -0,0 +1,61 @@
1
+ /*
2
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
3
+ */
4
+ import * as z from "zod/v3";
5
+ import { remap as remap$ } from "../../lib/primitives.js";
6
+ import { safeParse } from "../../lib/schemas.js";
7
+ import * as openEnums from "../../types/enums.js";
8
+ import * as types from "../../types/primitives.js";
9
+ import { Company$inboundSchema } from "./company.js";
10
+ import { Contact$inboundSchema } from "./contact.js";
11
+ import { SsoContinuation$inboundSchema, } from "./ssocontinuation.js";
12
+ import { UserDetails$inboundSchema } from "./userdetails.js";
13
+ import { Vendor$inboundSchema } from "./vendor.js";
14
+ /**
15
+ * A `permanent` user token can be used to access any API endpoint as the logged in user. A `one time` token is used to authenticate the user once.
16
+ */
17
+ export const AuthenticateSuccessResponseTokenType = {
18
+ Permanent: "permanent",
19
+ OneTime: "one time",
20
+ };
21
+ /** @internal */
22
+ export const AuthenticateSuccessResponseTokenType$inboundSchema = openEnums.inboundSchema(AuthenticateSuccessResponseTokenType);
23
+ /** @internal */
24
+ export const AuthenticateSuccessResponseUserToken$inboundSchema = z.object({
25
+ token: types.string(),
26
+ token_type: AuthenticateSuccessResponseTokenType$inboundSchema.default("permanent"),
27
+ }).transform((v) => {
28
+ return remap$(v, {
29
+ "token_type": "tokenType",
30
+ });
31
+ });
32
+ export function authenticateSuccessResponseUserTokenFromJSON(jsonString) {
33
+ return safeParse(jsonString, (x) => AuthenticateSuccessResponseUserToken$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'AuthenticateSuccessResponseUserToken' from JSON`);
34
+ }
35
+ /** @internal */
36
+ export const AuthenticateSuccessResponseInventoryManager$inboundSchema = z.object({});
37
+ export function authenticateSuccessResponseInventoryManagerFromJSON(jsonString) {
38
+ return safeParse(jsonString, (x) => AuthenticateSuccessResponseInventoryManager$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'AuthenticateSuccessResponseInventoryManager' from JSON`);
39
+ }
40
+ /** @internal */
41
+ export const AuthenticateSuccessResponse$inboundSchema = z.object({
42
+ is_gatekeeper: types.optional(types.boolean()),
43
+ success: types.boolean(),
44
+ user: UserDetails$inboundSchema,
45
+ user_token: z.lazy(() => AuthenticateSuccessResponseUserToken$inboundSchema),
46
+ vendor: types.optional(Vendor$inboundSchema),
47
+ inventory_manager: types.optional(z.lazy(() => AuthenticateSuccessResponseInventoryManager$inboundSchema)),
48
+ contact: z.nullable(Contact$inboundSchema).optional(),
49
+ company: z.nullable(Company$inboundSchema).optional(),
50
+ sso: types.optional(SsoContinuation$inboundSchema),
51
+ }).transform((v) => {
52
+ return remap$(v, {
53
+ "is_gatekeeper": "isGatekeeper",
54
+ "user_token": "userToken",
55
+ "inventory_manager": "inventoryManager",
56
+ });
57
+ });
58
+ export function authenticateSuccessResponseFromJSON(jsonString) {
59
+ return safeParse(jsonString, (x) => AuthenticateSuccessResponse$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'AuthenticateSuccessResponse' from JSON`);
60
+ }
61
+ //# sourceMappingURL=authenticatesuccessresponse.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"authenticatesuccessresponse.js","sourceRoot":"","sources":["../../../../src/models/components/authenticatesuccessresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAGlD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAEnD,OAAO,EAAW,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAW,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAe,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAU,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,UAAU;CACX,CAAC;AAsEX,gBAAgB;AAChB,MAAM,CAAC,MAAM,kDAAkD,GAI3D,SAAS,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAAC;AAElE,gBAAgB;AAChB,MAAM,CAAC,MAAM,kDAAkD,GAI3D,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,kDAAkD,CAAC,OAAO,CACpE,WAAW,CACZ;CACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,4CAA4C,CAC1D,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CACJ,kDAAkD,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACzE,kEAAkE,CACnE,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,yDAAyD,GAKhE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEnB,MAAM,UAAU,mDAAmD,CACjE,UAAkB;IAKlB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CACJ,yDAAyD,CAAC,KAAK,CAC7D,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CACd,EACH,yEAAyE,CAC1E,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,yCAAyC,GAIlD,CAAC,CAAC,MAAM,CAAC;IACX,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC9C,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,IAAI,EAAE,yBAAyB;IAC/B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,kDAAkD,CAAC;IAC5E,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC5C,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAC/B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,yDAAyD,CAAC,CACxE;IACD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACnD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;QACzB,mBAAmB,EAAE,kBAAkB;KACxC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,mCAAmC,CACjD,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,yCAAyC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACrE,yDAAyD,CAC1D,CAAC;AACJ,CAAC"}
@@ -1,6 +1,7 @@
1
1
  export * from "./activestatus.js";
2
2
  export * from "./alert.js";
3
3
  export * from "./appointmentsummary.js";
4
+ export * from "./authenticatesuccessresponse.js";
4
5
  export * from "./backgroundcheckresult.js";
5
6
  export * from "./company.js";
6
7
  export * from "./companycredentiallistitem.js";
@@ -85,6 +86,7 @@ export * from "./screeningansweractionsummary.js";
85
86
  export * from "./screeningquestion.js";
86
87
  export * from "./screeningresponse.js";
87
88
  export * from "./security.js";
89
+ export * from "./ssocontinuation.js";
88
90
  export * from "./standingappointment.js";
89
91
  export * from "./state.js";
90
92
  export * from "./subscription.js";
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/models/components/index.ts"],"names":[],"mappings":"AAIA,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kDAAkD,CAAC;AACjE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/models/components/index.ts"],"names":[],"mappings":"AAIA,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kDAAkD,CAAC;AACjE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}
@@ -4,6 +4,7 @@
4
4
  export * from "./activestatus.js";
5
5
  export * from "./alert.js";
6
6
  export * from "./appointmentsummary.js";
7
+ export * from "./authenticatesuccessresponse.js";
7
8
  export * from "./backgroundcheckresult.js";
8
9
  export * from "./company.js";
9
10
  export * from "./companycredentiallistitem.js";
@@ -88,6 +89,7 @@ export * from "./screeningansweractionsummary.js";
88
89
  export * from "./screeningquestion.js";
89
90
  export * from "./screeningresponse.js";
90
91
  export * from "./security.js";
92
+ export * from "./ssocontinuation.js";
91
93
  export * from "./standingappointment.js";
92
94
  export * from "./state.js";
93
95
  export * from "./subscription.js";
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/models/components/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kDAAkD,CAAC;AACjE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/models/components/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kDAAkD,CAAC;AACjE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}
@@ -15,12 +15,46 @@ export type LoginEmailAndPassword = {
15
15
  * Password as entered by the user
16
16
  */
17
17
  password: string;
18
+ /**
19
+ * Opaque, signed state that Green Security issues when a third-party service
20
+ *
21
+ * @remarks
22
+ * provider starts a "Login with Green Security" SAML flow at
23
+ * `/saml/idp/sso`. The login screen receives it as the `sso_state` query
24
+ * string parameter and must pass it back, byte for byte, on every call to
25
+ * this endpoint for the remainder of the login journey — including the
26
+ * second call that carries an `mfa_code`.
27
+ *
28
+ * The blob is signed, not encrypted, and it expires five minutes after the
29
+ * service provider's request arrives. Do not parse it, shorten it, decode
30
+ * it, or re-encode it.
31
+ *
32
+ * **An invalid blob does not fail the login.** This is the opposite of what
33
+ * most integrators assume, so it is worth stating plainly: a forged, edited
34
+ * or expired `sso_state` is silently discarded, and the request then
35
+ * proceeds as an ordinary login. Valid credentials still authenticate and
36
+ * still return `200` — just with no `sso` object, leaving the user signed in
37
+ * to Green Security with no way back to the service provider that sent them.
38
+ * Never treat a `200` as proof that the SSO hand-off survived; check for
39
+ * `sso` explicitly.
40
+ *
41
+ * Every `202` response echoes the *verified* blob back in its own
42
+ * `sso_state` field. Always send back the value from the response you just
43
+ * received rather than the one you started with, so that a blob the server
44
+ * has already rejected is never resent, and so a client does not have to
45
+ * hold state of its own across the login journey.
46
+ *
47
+ * Omit this field entirely for an ordinary login that did not originate
48
+ * from a service provider.
49
+ */
50
+ ssoState?: string | undefined;
18
51
  };
19
52
  /** @internal */
20
53
  export type LoginEmailAndPassword$Outbound = {
21
54
  email: string;
22
55
  mfa_code?: string | undefined;
23
56
  password: string;
57
+ sso_state?: string | undefined;
24
58
  };
25
59
  /** @internal */
26
60
  export declare const LoginEmailAndPassword$outboundSchema: z.ZodType<LoginEmailAndPassword$Outbound, z.ZodTypeDef, LoginEmailAndPassword>;
@@ -1 +1 @@
1
- {"version":3,"file":"loginemailandpassword.d.ts","sourceRoot":"","sources":["../../../../src/models/components/loginemailandpassword.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,8BAA8B,GAAG;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,OAAO,CAC1D,8BAA8B,EAC9B,CAAC,CAAC,UAAU,EACZ,qBAAqB,CASrB,CAAC;AAEH,wBAAgB,2BAA2B,CACzC,qBAAqB,EAAE,qBAAqB,GAC3C,MAAM,CAIR"}
1
+ {"version":3,"file":"loginemailandpassword.d.ts","sourceRoot":"","sources":["../../../../src/models/components/loginemailandpassword.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,8BAA8B,GAAG;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,OAAO,CAC1D,8BAA8B,EAC9B,CAAC,CAAC,UAAU,EACZ,qBAAqB,CAWrB,CAAC;AAEH,wBAAgB,2BAA2B,CACzC,qBAAqB,EAAE,qBAAqB,GAC3C,MAAM,CAIR"}
@@ -8,9 +8,11 @@ export const LoginEmailAndPassword$outboundSchema = z.object({
8
8
  email: z.string(),
9
9
  mfaCode: z.string().optional(),
10
10
  password: z.string(),
11
+ ssoState: z.string().optional(),
11
12
  }).transform((v) => {
12
13
  return remap$(v, {
13
14
  mfaCode: "mfa_code",
15
+ ssoState: "sso_state",
14
16
  });
15
17
  });
16
18
  export function loginEmailAndPasswordToJSON(loginEmailAndPassword) {
@@ -1 +1 @@
1
- {"version":3,"file":"loginemailandpassword.js","sourceRoot":"","sources":["../../../../src/models/components/loginemailandpassword.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AA2B1D,gBAAgB;AAChB,MAAM,CAAC,MAAM,oCAAoC,GAI7C,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CACzC,qBAA4C;IAE5C,OAAO,IAAI,CAAC,SAAS,CACnB,oCAAoC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAClE,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"loginemailandpassword.js","sourceRoot":"","sources":["../../../../src/models/components/loginemailandpassword.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AA6D1D,gBAAgB;AAChB,MAAM,CAAC,MAAM,oCAAoC,GAI7C,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CACzC,qBAA4C;IAE5C,OAAO,IAAI,CAAC,SAAS,CACnB,oCAAoC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAClE,CAAC;AACJ,CAAC"}
@@ -11,11 +11,45 @@ export type LoginRequirementsFromEmail = {
11
11
  * A proper URI where the user should be sent after completing a SAML login. This is encoded into the response you will get if the user requires a SAML login.
12
12
  */
13
13
  returnUrl: string;
14
+ /**
15
+ * Opaque, signed state that Green Security issues when a third-party service
16
+ *
17
+ * @remarks
18
+ * provider starts a "Login with Green Security" SAML flow at
19
+ * `/saml/idp/sso`. The login screen receives it as the `sso_state` query
20
+ * string parameter and must pass it back, byte for byte, on every call to
21
+ * this endpoint for the remainder of the login journey — including the
22
+ * second call that carries an `mfa_code`.
23
+ *
24
+ * The blob is signed, not encrypted, and it expires five minutes after the
25
+ * service provider's request arrives. Do not parse it, shorten it, decode
26
+ * it, or re-encode it.
27
+ *
28
+ * **An invalid blob does not fail the login.** This is the opposite of what
29
+ * most integrators assume, so it is worth stating plainly: a forged, edited
30
+ * or expired `sso_state` is silently discarded, and the request then
31
+ * proceeds as an ordinary login. Valid credentials still authenticate and
32
+ * still return `200` — just with no `sso` object, leaving the user signed in
33
+ * to Green Security with no way back to the service provider that sent them.
34
+ * Never treat a `200` as proof that the SSO hand-off survived; check for
35
+ * `sso` explicitly.
36
+ *
37
+ * Every `202` response echoes the *verified* blob back in its own
38
+ * `sso_state` field. Always send back the value from the response you just
39
+ * received rather than the one you started with, so that a blob the server
40
+ * has already rejected is never resent, and so a client does not have to
41
+ * hold state of its own across the login journey.
42
+ *
43
+ * Omit this field entirely for an ordinary login that did not originate
44
+ * from a service provider.
45
+ */
46
+ ssoState?: string | undefined;
14
47
  };
15
48
  /** @internal */
16
49
  export type LoginRequirementsFromEmail$Outbound = {
17
50
  email: string;
18
51
  return_url: string;
52
+ sso_state?: string | undefined;
19
53
  };
20
54
  /** @internal */
21
55
  export declare const LoginRequirementsFromEmail$outboundSchema: z.ZodType<LoginRequirementsFromEmail$Outbound, z.ZodTypeDef, LoginRequirementsFromEmail>;
@@ -1 +1 @@
1
- {"version":3,"file":"loginrequirementsfromemail.d.ts","sourceRoot":"","sources":["../../../../src/models/components/loginrequirementsfromemail.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,mCAAmC,GAAG;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,yCAAyC,EAAE,CAAC,CAAC,OAAO,CAC/D,mCAAmC,EACnC,CAAC,CAAC,UAAU,EACZ,0BAA0B,CAQ1B,CAAC;AAEH,wBAAgB,gCAAgC,CAC9C,0BAA0B,EAAE,0BAA0B,GACrD,MAAM,CAIR"}
1
+ {"version":3,"file":"loginrequirementsfromemail.d.ts","sourceRoot":"","sources":["../../../../src/models/components/loginrequirementsfromemail.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,mCAAmC,GAAG;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,yCAAyC,EAAE,CAAC,CAAC,OAAO,CAC/D,mCAAmC,EACnC,CAAC,CAAC,UAAU,EACZ,0BAA0B,CAU1B,CAAC;AAEH,wBAAgB,gCAAgC,CAC9C,0BAA0B,EAAE,0BAA0B,GACrD,MAAM,CAIR"}
@@ -7,9 +7,11 @@ import { remap as remap$ } from "../../lib/primitives.js";
7
7
  export const LoginRequirementsFromEmail$outboundSchema = z.object({
8
8
  email: z.string(),
9
9
  returnUrl: z.string(),
10
+ ssoState: z.string().optional(),
10
11
  }).transform((v) => {
11
12
  return remap$(v, {
12
13
  returnUrl: "return_url",
14
+ ssoState: "sso_state",
13
15
  });
14
16
  });
15
17
  export function loginRequirementsFromEmailToJSON(loginRequirementsFromEmail) {
@@ -1 +1 @@
1
- {"version":3,"file":"loginrequirementsfromemail.js","sourceRoot":"","sources":["../../../../src/models/components/loginrequirementsfromemail.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAsB1D,gBAAgB;AAChB,MAAM,CAAC,MAAM,yCAAyC,GAIlD,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,gCAAgC,CAC9C,0BAAsD;IAEtD,OAAO,IAAI,CAAC,SAAS,CACnB,yCAAyC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAC5E,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"loginrequirementsfromemail.js","sourceRoot":"","sources":["../../../../src/models/components/loginrequirementsfromemail.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAwD1D,gBAAgB;AAChB,MAAM,CAAC,MAAM,yCAAyC,GAIlD,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,gCAAgC,CAC9C,0BAAsD;IAEtD,OAAO,IAAI,CAAC,SAAS,CACnB,yCAAyC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAC5E,CAAC;AACJ,CAAC"}
@@ -26,6 +26,39 @@ export type MfaRequiredResponse = {
26
26
  */
27
27
  mobilePhone?: string | undefined;
28
28
  mfaMethod?: MfaMethod | undefined;
29
+ /**
30
+ * Opaque, signed state that Green Security issues when a third-party service
31
+ *
32
+ * @remarks
33
+ * provider starts a "Login with Green Security" SAML flow at
34
+ * `/saml/idp/sso`. The login screen receives it as the `sso_state` query
35
+ * string parameter and must pass it back, byte for byte, on every call to
36
+ * this endpoint for the remainder of the login journey — including the
37
+ * second call that carries an `mfa_code`.
38
+ *
39
+ * The blob is signed, not encrypted, and it expires five minutes after the
40
+ * service provider's request arrives. Do not parse it, shorten it, decode
41
+ * it, or re-encode it.
42
+ *
43
+ * **An invalid blob does not fail the login.** This is the opposite of what
44
+ * most integrators assume, so it is worth stating plainly: a forged, edited
45
+ * or expired `sso_state` is silently discarded, and the request then
46
+ * proceeds as an ordinary login. Valid credentials still authenticate and
47
+ * still return `200` — just with no `sso` object, leaving the user signed in
48
+ * to Green Security with no way back to the service provider that sent them.
49
+ * Never treat a `200` as proof that the SSO hand-off survived; check for
50
+ * `sso` explicitly.
51
+ *
52
+ * Every `202` response echoes the *verified* blob back in its own
53
+ * `sso_state` field. Always send back the value from the response you just
54
+ * received rather than the one you started with, so that a blob the server
55
+ * has already rejected is never resent, and so a client does not have to
56
+ * hold state of its own across the login journey.
57
+ *
58
+ * Omit this field entirely for an ordinary login that did not originate
59
+ * from a service provider.
60
+ */
61
+ ssoState?: string | undefined;
29
62
  };
30
63
  /** @internal */
31
64
  export declare const MfaMethod$inboundSchema: z.ZodType<MfaMethod, z.ZodTypeDef, unknown>;
@@ -1 +1 @@
1
- {"version":3,"file":"mfarequiredresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/mfarequiredresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,eAAO,MAAM,SAAS;;;CAGZ,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAC7C,SAAS,EACT,CAAC,CAAC,UAAU,EACZ,OAAO,CAC6B,CAAC;AAEvC,gBAAgB;AAChB,eAAO,MAAM,iCAAiC,EAAE,CAAC,CAAC,OAAO,CACvD,mBAAmB,EACnB,CAAC,CAAC,UAAU,EACZ,OAAO,CAYP,CAAC;AAEH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAM1D"}
1
+ {"version":3,"file":"mfarequiredresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/mfarequiredresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,eAAO,MAAM,SAAS;;;CAGZ,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAC7C,SAAS,EACT,CAAC,CAAC,UAAU,EACZ,OAAO,CAC6B,CAAC;AAEvC,gBAAgB;AAChB,eAAO,MAAM,iCAAiC,EAAE,CAAC,CAAC,OAAO,CACvD,mBAAmB,EACnB,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAM1D"}
@@ -19,10 +19,12 @@ export const MfaRequiredResponse$inboundSchema = z.object({
19
19
  error: types.string(),
20
20
  mobile_phone: types.optional(types.string()),
21
21
  mfa_method: types.optional(MfaMethod$inboundSchema),
22
+ sso_state: types.optional(types.string()),
22
23
  }).transform((v) => {
23
24
  return remap$(v, {
24
25
  "mobile_phone": "mobilePhone",
25
26
  "mfa_method": "mfaMethod",
27
+ "sso_state": "ssoState",
26
28
  });
27
29
  });
28
30
  export function mfaRequiredResponseFromJSON(jsonString) {
@@ -1 +1 @@
1
- {"version":3,"file":"mfarequiredresponse.js","sourceRoot":"","sources":["../../../../src/models/components/mfarequiredresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAGlD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAGnD,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACN,CAAC;AAwBX,gBAAgB;AAChB,MAAM,CAAC,MAAM,uBAAuB,GAIhC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAEvC,gBAAgB;AAChB,MAAM,CAAC,MAAM,iCAAiC,GAI1C,CAAC,CAAC,MAAM,CAAC;IACX,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;IACnC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5C,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CACpD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;QAC7B,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CACzC,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC7D,iDAAiD,CAClD,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"mfarequiredresponse.js","sourceRoot":"","sources":["../../../../src/models/components/mfarequiredresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAGlD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAGnD,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACN,CAAC;AAyDX,gBAAgB;AAChB,MAAM,CAAC,MAAM,uBAAuB,GAIhC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAEvC,gBAAgB;AAChB,MAAM,CAAC,MAAM,iCAAiC,GAI1C,CAAC,CAAC,MAAM,CAAC;IACX,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;IACnC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5C,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACnD,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;QAC7B,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,UAAU;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CACzC,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC7D,iDAAiD,CAClD,CAAC;AACJ,CAAC"}
@@ -12,9 +12,42 @@ export type PasswordNotSetResponse = {
12
12
  */
13
13
  error: string;
14
14
  /**
15
- * URL to redirect the user to set their password (forgot password flow). Includes return_url query param when provided in the request.
15
+ * URL to redirect the user to set their password (forgot password flow). Carries the `return_url` and `sso_state` query params when those were provided on the request, because the browser follows this redirect and leaves the JSON body behind.
16
16
  */
17
17
  redirectUrl: string;
18
+ /**
19
+ * Opaque, signed state that Green Security issues when a third-party service
20
+ *
21
+ * @remarks
22
+ * provider starts a "Login with Green Security" SAML flow at
23
+ * `/saml/idp/sso`. The login screen receives it as the `sso_state` query
24
+ * string parameter and must pass it back, byte for byte, on every call to
25
+ * this endpoint for the remainder of the login journey — including the
26
+ * second call that carries an `mfa_code`.
27
+ *
28
+ * The blob is signed, not encrypted, and it expires five minutes after the
29
+ * service provider's request arrives. Do not parse it, shorten it, decode
30
+ * it, or re-encode it.
31
+ *
32
+ * **An invalid blob does not fail the login.** This is the opposite of what
33
+ * most integrators assume, so it is worth stating plainly: a forged, edited
34
+ * or expired `sso_state` is silently discarded, and the request then
35
+ * proceeds as an ordinary login. Valid credentials still authenticate and
36
+ * still return `200` — just with no `sso` object, leaving the user signed in
37
+ * to Green Security with no way back to the service provider that sent them.
38
+ * Never treat a `200` as proof that the SSO hand-off survived; check for
39
+ * `sso` explicitly.
40
+ *
41
+ * Every `202` response echoes the *verified* blob back in its own
42
+ * `sso_state` field. Always send back the value from the response you just
43
+ * received rather than the one you started with, so that a blob the server
44
+ * has already rejected is never resent, and so a client does not have to
45
+ * hold state of its own across the login journey.
46
+ *
47
+ * Omit this field entirely for an ordinary login that did not originate
48
+ * from a service provider.
49
+ */
50
+ ssoState?: string | undefined;
18
51
  };
19
52
  /** @internal */
20
53
  export declare const PasswordNotSetResponse$inboundSchema: z.ZodType<PasswordNotSetResponse, z.ZodTypeDef, unknown>;
@@ -1 +1 @@
1
- {"version":3,"file":"passwordnotsetresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/passwordnotsetresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,OAAO,CAC1D,sBAAsB,EACtB,CAAC,CAAC,UAAU,EACZ,OAAO,CAUP,CAAC;AAEH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAM7D"}
1
+ {"version":3,"file":"passwordnotsetresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/passwordnotsetresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,OAAO,CAC1D,sBAAsB,EACtB,CAAC,CAAC,UAAU,EACZ,OAAO,CAYP,CAAC;AAEH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAM7D"}
@@ -11,9 +11,11 @@ export const PasswordNotSetResponse$inboundSchema = z.object({
11
11
  success: types.boolean(),
12
12
  error: types.string(),
13
13
  redirect_url: types.string(),
14
+ sso_state: types.optional(types.string()),
14
15
  }).transform((v) => {
15
16
  return remap$(v, {
16
17
  "redirect_url": "redirectUrl",
18
+ "sso_state": "ssoState",
17
19
  });
18
20
  });
19
21
  export function passwordNotSetResponseFromJSON(jsonString) {
@@ -1 +1 @@
1
- {"version":3,"file":"passwordnotsetresponse.js","sourceRoot":"","sources":["../../../../src/models/components/passwordnotsetresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAmBnD,gBAAgB;AAChB,MAAM,CAAC,MAAM,oCAAoC,GAI7C,CAAC,CAAC,MAAM,CAAC;IACX,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACzC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;KAC9B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,8BAA8B,CAC5C,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChE,oDAAoD,CACrD,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"passwordnotsetresponse.js","sourceRoot":"","sources":["../../../../src/models/components/passwordnotsetresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAoDnD,gBAAgB;AAChB,MAAM,CAAC,MAAM,oCAAoC,GAI7C,CAAC,CAAC,MAAM,CAAC;IACX,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACzC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;IAC5B,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,UAAU;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,8BAA8B,CAC5C,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChE,oDAAoD,CACrD,CAAC;AACJ,CAAC"}
@@ -11,6 +11,39 @@ export type PasswordRequiredResponse = {
11
11
  * Error describing the exact condition of what further steps are needed to finish the login process.
12
12
  */
13
13
  error: string;
14
+ /**
15
+ * Opaque, signed state that Green Security issues when a third-party service
16
+ *
17
+ * @remarks
18
+ * provider starts a "Login with Green Security" SAML flow at
19
+ * `/saml/idp/sso`. The login screen receives it as the `sso_state` query
20
+ * string parameter and must pass it back, byte for byte, on every call to
21
+ * this endpoint for the remainder of the login journey — including the
22
+ * second call that carries an `mfa_code`.
23
+ *
24
+ * The blob is signed, not encrypted, and it expires five minutes after the
25
+ * service provider's request arrives. Do not parse it, shorten it, decode
26
+ * it, or re-encode it.
27
+ *
28
+ * **An invalid blob does not fail the login.** This is the opposite of what
29
+ * most integrators assume, so it is worth stating plainly: a forged, edited
30
+ * or expired `sso_state` is silently discarded, and the request then
31
+ * proceeds as an ordinary login. Valid credentials still authenticate and
32
+ * still return `200` — just with no `sso` object, leaving the user signed in
33
+ * to Green Security with no way back to the service provider that sent them.
34
+ * Never treat a `200` as proof that the SSO hand-off survived; check for
35
+ * `sso` explicitly.
36
+ *
37
+ * Every `202` response echoes the *verified* blob back in its own
38
+ * `sso_state` field. Always send back the value from the response you just
39
+ * received rather than the one you started with, so that a blob the server
40
+ * has already rejected is never resent, and so a client does not have to
41
+ * hold state of its own across the login journey.
42
+ *
43
+ * Omit this field entirely for an ordinary login that did not originate
44
+ * from a service provider.
45
+ */
46
+ ssoState?: string | undefined;
14
47
  };
15
48
  /** @internal */
16
49
  export declare const PasswordRequiredResponse$inboundSchema: z.ZodType<PasswordRequiredResponse, z.ZodTypeDef, unknown>;
@@ -1 +1 @@
1
- {"version":3,"file":"passwordrequiredresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/passwordrequiredresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,sCAAsC,EAAE,CAAC,CAAC,OAAO,CAC5D,wBAAwB,EACxB,CAAC,CAAC,UAAU,EACZ,OAAO,CAKP,CAAC;AAEH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,CAM/D"}
1
+ {"version":3,"file":"passwordrequiredresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/passwordrequiredresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,sCAAsC,EAAE,CAAC,CAAC,OAAO,CAC5D,wBAAwB,EACxB,CAAC,CAAC,UAAU,EACZ,OAAO,CAUP,CAAC;AAEH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,CAM/D"}
@@ -2,6 +2,7 @@
2
2
  * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
3
3
  */
4
4
  import * as z from "zod/v3";
5
+ import { remap as remap$ } from "../../lib/primitives.js";
5
6
  import { safeParse } from "../../lib/schemas.js";
6
7
  import * as types from "../../types/primitives.js";
7
8
  /** @internal */
@@ -9,6 +10,11 @@ export const PasswordRequiredResponse$inboundSchema = z.object({
9
10
  requires: types.literal("password"),
10
11
  success: types.boolean(),
11
12
  error: types.string(),
13
+ sso_state: types.optional(types.string()),
14
+ }).transform((v) => {
15
+ return remap$(v, {
16
+ "sso_state": "ssoState",
17
+ });
12
18
  });
13
19
  export function passwordRequiredResponseFromJSON(jsonString) {
14
20
  return safeParse(jsonString, (x) => PasswordRequiredResponse$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'PasswordRequiredResponse' from JSON`);