@greensecurity/javascript-sdk 0.45.0-beta.16 → 0.45.0-beta.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commonjs/__tests__/vendors.test.js +1 -1
- package/dist/commonjs/__tests__/vendors.test.js.map +1 -1
- package/dist/commonjs/__tests__/webhooks.test.js +1 -1
- package/dist/commonjs/__tests__/webhooks.test.js.map +1 -1
- package/dist/commonjs/__tests__/zones.test.js +2 -9
- package/dist/commonjs/__tests__/zones.test.js.map +1 -1
- package/dist/commonjs/funcs/usersPostAuthenticate.d.ts +37 -0
- package/dist/commonjs/funcs/usersPostAuthenticate.d.ts.map +1 -1
- package/dist/commonjs/funcs/usersPostAuthenticate.js +37 -0
- package/dist/commonjs/funcs/usersPostAuthenticate.js.map +1 -1
- package/dist/commonjs/lib/config.d.ts +2 -2
- package/dist/commonjs/lib/config.js +2 -2
- package/dist/commonjs/models/components/authenticatesuccessresponse.d.ts +91 -0
- package/dist/commonjs/models/components/authenticatesuccessresponse.d.ts.map +1 -0
- package/dist/commonjs/models/components/authenticatesuccessresponse.js +100 -0
- package/dist/commonjs/models/components/authenticatesuccessresponse.js.map +1 -0
- package/dist/commonjs/models/components/index.d.ts +2 -0
- package/dist/commonjs/models/components/index.d.ts.map +1 -1
- package/dist/commonjs/models/components/index.js +2 -0
- package/dist/commonjs/models/components/index.js.map +1 -1
- package/dist/commonjs/models/components/loginemailandpassword.d.ts +34 -0
- package/dist/commonjs/models/components/loginemailandpassword.d.ts.map +1 -1
- package/dist/commonjs/models/components/loginemailandpassword.js +2 -0
- package/dist/commonjs/models/components/loginemailandpassword.js.map +1 -1
- package/dist/commonjs/models/components/loginrequirementsfromemail.d.ts +34 -0
- package/dist/commonjs/models/components/loginrequirementsfromemail.d.ts.map +1 -1
- package/dist/commonjs/models/components/loginrequirementsfromemail.js +2 -0
- package/dist/commonjs/models/components/loginrequirementsfromemail.js.map +1 -1
- package/dist/commonjs/models/components/mfarequiredresponse.d.ts +33 -0
- package/dist/commonjs/models/components/mfarequiredresponse.d.ts.map +1 -1
- package/dist/commonjs/models/components/mfarequiredresponse.js +2 -0
- package/dist/commonjs/models/components/mfarequiredresponse.js.map +1 -1
- package/dist/commonjs/models/components/passwordnotsetresponse.d.ts +34 -1
- package/dist/commonjs/models/components/passwordnotsetresponse.d.ts.map +1 -1
- package/dist/commonjs/models/components/passwordnotsetresponse.js +2 -0
- package/dist/commonjs/models/components/passwordnotsetresponse.js.map +1 -1
- package/dist/commonjs/models/components/passwordrequiredresponse.d.ts +33 -0
- package/dist/commonjs/models/components/passwordrequiredresponse.d.ts.map +1 -1
- package/dist/commonjs/models/components/passwordrequiredresponse.js +6 -0
- package/dist/commonjs/models/components/passwordrequiredresponse.js.map +1 -1
- package/dist/commonjs/models/components/samlloginrequiredresponse.d.ts +33 -0
- package/dist/commonjs/models/components/samlloginrequiredresponse.d.ts.map +1 -1
- package/dist/commonjs/models/components/samlloginrequiredresponse.js +2 -0
- package/dist/commonjs/models/components/samlloginrequiredresponse.js.map +1 -1
- package/dist/commonjs/models/components/ssocontinuation.d.ts +44 -0
- package/dist/commonjs/models/components/ssocontinuation.d.ts.map +1 -0
- package/dist/commonjs/models/components/ssocontinuation.js +56 -0
- package/dist/commonjs/models/components/ssocontinuation.js.map +1 -0
- package/dist/commonjs/models/operations/postauthenticate.d.ts +1 -1
- package/dist/commonjs/models/operations/postauthenticate.d.ts.map +1 -1
- package/dist/commonjs/models/operations/postauthenticate.js +1 -1
- package/dist/commonjs/models/operations/postauthenticate.js.map +1 -1
- package/dist/commonjs/react-query/usersPostAuthenticate.d.ts +37 -0
- package/dist/commonjs/react-query/usersPostAuthenticate.d.ts.map +1 -1
- package/dist/commonjs/react-query/usersPostAuthenticate.js +37 -0
- package/dist/commonjs/react-query/usersPostAuthenticate.js.map +1 -1
- package/dist/commonjs/sdk/users.d.ts +37 -0
- package/dist/commonjs/sdk/users.d.ts.map +1 -1
- package/dist/commonjs/sdk/users.js +37 -0
- package/dist/commonjs/sdk/users.js.map +1 -1
- package/dist/esm/__tests__/vendors.test.js +1 -1
- package/dist/esm/__tests__/vendors.test.js.map +1 -1
- package/dist/esm/__tests__/webhooks.test.js +1 -1
- package/dist/esm/__tests__/webhooks.test.js.map +1 -1
- package/dist/esm/__tests__/zones.test.js +2 -9
- package/dist/esm/__tests__/zones.test.js.map +1 -1
- package/dist/esm/funcs/usersPostAuthenticate.d.ts +37 -0
- package/dist/esm/funcs/usersPostAuthenticate.d.ts.map +1 -1
- package/dist/esm/funcs/usersPostAuthenticate.js +37 -0
- package/dist/esm/funcs/usersPostAuthenticate.js.map +1 -1
- package/dist/esm/lib/config.d.ts +2 -2
- package/dist/esm/lib/config.js +2 -2
- package/dist/esm/models/components/authenticatesuccessresponse.d.ts +91 -0
- package/dist/esm/models/components/authenticatesuccessresponse.d.ts.map +1 -0
- package/dist/esm/models/components/authenticatesuccessresponse.js +61 -0
- package/dist/esm/models/components/authenticatesuccessresponse.js.map +1 -0
- package/dist/esm/models/components/index.d.ts +2 -0
- package/dist/esm/models/components/index.d.ts.map +1 -1
- package/dist/esm/models/components/index.js +2 -0
- package/dist/esm/models/components/index.js.map +1 -1
- package/dist/esm/models/components/loginemailandpassword.d.ts +34 -0
- package/dist/esm/models/components/loginemailandpassword.d.ts.map +1 -1
- package/dist/esm/models/components/loginemailandpassword.js +2 -0
- package/dist/esm/models/components/loginemailandpassword.js.map +1 -1
- package/dist/esm/models/components/loginrequirementsfromemail.d.ts +34 -0
- package/dist/esm/models/components/loginrequirementsfromemail.d.ts.map +1 -1
- package/dist/esm/models/components/loginrequirementsfromemail.js +2 -0
- package/dist/esm/models/components/loginrequirementsfromemail.js.map +1 -1
- package/dist/esm/models/components/mfarequiredresponse.d.ts +33 -0
- package/dist/esm/models/components/mfarequiredresponse.d.ts.map +1 -1
- package/dist/esm/models/components/mfarequiredresponse.js +2 -0
- package/dist/esm/models/components/mfarequiredresponse.js.map +1 -1
- package/dist/esm/models/components/passwordnotsetresponse.d.ts +34 -1
- package/dist/esm/models/components/passwordnotsetresponse.d.ts.map +1 -1
- package/dist/esm/models/components/passwordnotsetresponse.js +2 -0
- package/dist/esm/models/components/passwordnotsetresponse.js.map +1 -1
- package/dist/esm/models/components/passwordrequiredresponse.d.ts +33 -0
- package/dist/esm/models/components/passwordrequiredresponse.d.ts.map +1 -1
- package/dist/esm/models/components/passwordrequiredresponse.js +6 -0
- package/dist/esm/models/components/passwordrequiredresponse.js.map +1 -1
- package/dist/esm/models/components/samlloginrequiredresponse.d.ts +33 -0
- package/dist/esm/models/components/samlloginrequiredresponse.d.ts.map +1 -1
- package/dist/esm/models/components/samlloginrequiredresponse.js +2 -0
- package/dist/esm/models/components/samlloginrequiredresponse.js.map +1 -1
- package/dist/esm/models/components/ssocontinuation.d.ts +44 -0
- package/dist/esm/models/components/ssocontinuation.d.ts.map +1 -0
- package/dist/esm/models/components/ssocontinuation.js +19 -0
- package/dist/esm/models/components/ssocontinuation.js.map +1 -0
- package/dist/esm/models/operations/postauthenticate.d.ts +1 -1
- package/dist/esm/models/operations/postauthenticate.d.ts.map +1 -1
- package/dist/esm/models/operations/postauthenticate.js +1 -1
- package/dist/esm/models/operations/postauthenticate.js.map +1 -1
- package/dist/esm/react-query/usersPostAuthenticate.d.ts +37 -0
- package/dist/esm/react-query/usersPostAuthenticate.d.ts.map +1 -1
- package/dist/esm/react-query/usersPostAuthenticate.js +37 -0
- package/dist/esm/react-query/usersPostAuthenticate.js.map +1 -1
- package/dist/esm/sdk/users.d.ts +37 -0
- package/dist/esm/sdk/users.d.ts.map +1 -1
- package/dist/esm/sdk/users.js +37 -0
- package/dist/esm/sdk/users.js.map +1 -1
- package/jsr.json +1 -1
- package/package.json +1 -1
- package/src/__tests__/vendors.test.ts +1 -1
- package/src/__tests__/webhooks.test.ts +1 -1
- package/src/__tests__/zones.test.ts +2 -9
- package/src/funcs/usersPostAuthenticate.ts +37 -0
- package/src/lib/config.ts +2 -2
- package/src/models/components/authenticatesuccessresponse.ts +189 -0
- package/src/models/components/index.ts +2 -0
- package/src/models/components/loginemailandpassword.ts +36 -0
- package/src/models/components/loginrequirementsfromemail.ts +36 -0
- package/src/models/components/mfarequiredresponse.ts +35 -0
- package/src/models/components/passwordnotsetresponse.ts +36 -1
- package/src/models/components/passwordrequiredresponse.ts +39 -0
- package/src/models/components/samlloginrequiredresponse.ts +35 -0
- package/src/models/components/ssocontinuation.ts +71 -0
- package/src/models/operations/postauthenticate.ts +2 -2
- package/src/react-query/usersPostAuthenticate.ts +37 -0
- package/src/sdk/users.ts +37 -0
package/dist/esm/lib/config.d.ts
CHANGED
|
@@ -35,8 +35,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
|
|
|
35
35
|
export declare const SDK_METADATA: {
|
|
36
36
|
readonly language: "typescript";
|
|
37
37
|
readonly openapiDocVersion: "0.45.0";
|
|
38
|
-
readonly sdkVersion: "0.45.0-beta.
|
|
38
|
+
readonly sdkVersion: "0.45.0-beta.17";
|
|
39
39
|
readonly genVersion: "2.935.1";
|
|
40
|
-
readonly userAgent: "speakeasy-sdk/typescript 0.45.0-beta.
|
|
40
|
+
readonly userAgent: "speakeasy-sdk/typescript 0.45.0-beta.17 2.935.1 0.45.0 @greensecurity/javascript-sdk";
|
|
41
41
|
};
|
|
42
42
|
//# sourceMappingURL=config.d.ts.map
|
package/dist/esm/lib/config.js
CHANGED
|
@@ -39,8 +39,8 @@ export function serverURLFromOptions(options) {
|
|
|
39
39
|
export const SDK_METADATA = {
|
|
40
40
|
language: "typescript",
|
|
41
41
|
openapiDocVersion: "0.45.0",
|
|
42
|
-
sdkVersion: "0.45.0-beta.
|
|
42
|
+
sdkVersion: "0.45.0-beta.17",
|
|
43
43
|
genVersion: "2.935.1",
|
|
44
|
-
userAgent: "speakeasy-sdk/typescript 0.45.0-beta.
|
|
44
|
+
userAgent: "speakeasy-sdk/typescript 0.45.0-beta.17 2.935.1 0.45.0 @greensecurity/javascript-sdk",
|
|
45
45
|
};
|
|
46
46
|
//# sourceMappingURL=config.js.map
|
|
@@ -0,0 +1,91 @@
|
|
|
1
|
+
import * as z from "zod/v3";
|
|
2
|
+
import { OpenEnum } from "../../types/enums.js";
|
|
3
|
+
import { Result as SafeParseResult } from "../../types/fp.js";
|
|
4
|
+
import { SDKValidationError } from "../errors/sdkvalidationerror.js";
|
|
5
|
+
import { Company } from "./company.js";
|
|
6
|
+
import { Contact } from "./contact.js";
|
|
7
|
+
import { SsoContinuation } from "./ssocontinuation.js";
|
|
8
|
+
import { UserDetails } from "./userdetails.js";
|
|
9
|
+
import { Vendor } from "./vendor.js";
|
|
10
|
+
/**
|
|
11
|
+
* A `permanent` user token can be used to access any API endpoint as the logged in user. A `one time` token is used to authenticate the user once.
|
|
12
|
+
*/
|
|
13
|
+
export declare const AuthenticateSuccessResponseTokenType: {
|
|
14
|
+
readonly Permanent: "permanent";
|
|
15
|
+
readonly OneTime: "one time";
|
|
16
|
+
};
|
|
17
|
+
/**
|
|
18
|
+
* A `permanent` user token can be used to access any API endpoint as the logged in user. A `one time` token is used to authenticate the user once.
|
|
19
|
+
*/
|
|
20
|
+
export type AuthenticateSuccessResponseTokenType = OpenEnum<typeof AuthenticateSuccessResponseTokenType>;
|
|
21
|
+
export type AuthenticateSuccessResponseUserToken = {
|
|
22
|
+
/**
|
|
23
|
+
* This token can be passed in authorization headers for this user.
|
|
24
|
+
*/
|
|
25
|
+
token: string;
|
|
26
|
+
/**
|
|
27
|
+
* A `permanent` user token can be used to access any API endpoint as the logged in user. A `one time` token is used to authenticate the user once.
|
|
28
|
+
*/
|
|
29
|
+
tokenType: AuthenticateSuccessResponseTokenType;
|
|
30
|
+
};
|
|
31
|
+
export type AuthenticateSuccessResponseInventoryManager = {};
|
|
32
|
+
/**
|
|
33
|
+
* A completed login. Identical to the `User` object returned everywhere
|
|
34
|
+
*
|
|
35
|
+
* @remarks
|
|
36
|
+
* else, plus an `sso` object when the request carried a valid `sso_state`
|
|
37
|
+
* and the login therefore has a SAML flow waiting to be finished.
|
|
38
|
+
*/
|
|
39
|
+
export type AuthenticateSuccessResponse = {
|
|
40
|
+
/**
|
|
41
|
+
* A `gatekeeper` is a special type of service user. This type of service user is assigned to Kiosks and Apps to verify Vendors using APIs that have some access to facility data.
|
|
42
|
+
*/
|
|
43
|
+
isGatekeeper?: boolean | undefined;
|
|
44
|
+
success: boolean;
|
|
45
|
+
/**
|
|
46
|
+
* Core user profile fields returned by user detail and update endpoints.
|
|
47
|
+
*/
|
|
48
|
+
user: UserDetails;
|
|
49
|
+
userToken: AuthenticateSuccessResponseUserToken;
|
|
50
|
+
/**
|
|
51
|
+
* Vendor details
|
|
52
|
+
*/
|
|
53
|
+
vendor?: Vendor | undefined;
|
|
54
|
+
inventoryManager?: AuthenticateSuccessResponseInventoryManager | undefined;
|
|
55
|
+
/**
|
|
56
|
+
* This object represents a contact at the system or facility level. Use it to verify vendors, create appointments, or check in visitors.
|
|
57
|
+
*/
|
|
58
|
+
contact?: Contact | null | undefined;
|
|
59
|
+
/**
|
|
60
|
+
* A simplified representation of a Company, typically used in list views.
|
|
61
|
+
*/
|
|
62
|
+
company?: Company | null | undefined;
|
|
63
|
+
/**
|
|
64
|
+
* Where to send the browser to finish a "Login with Green Security" flow.
|
|
65
|
+
*
|
|
66
|
+
* @remarks
|
|
67
|
+
*
|
|
68
|
+
* Present on a `200` from `POST /users/authenticate` only when the request
|
|
69
|
+
* carried a valid, unexpired `sso_state`. Its absence means the login
|
|
70
|
+
* succeeded but the SAML flow did not resume — treat the login as an
|
|
71
|
+
* ordinary one rather than retrying.
|
|
72
|
+
*
|
|
73
|
+
* This object is additive. The login itself is unaffected by it: the
|
|
74
|
+
* caller's own permanent token is in `user_token` exactly as it would be on
|
|
75
|
+
* any other successful authentication, and it is not the token embedded in
|
|
76
|
+
* `continue_url`.
|
|
77
|
+
*/
|
|
78
|
+
sso?: SsoContinuation | undefined;
|
|
79
|
+
};
|
|
80
|
+
/** @internal */
|
|
81
|
+
export declare const AuthenticateSuccessResponseTokenType$inboundSchema: z.ZodType<AuthenticateSuccessResponseTokenType, z.ZodTypeDef, unknown>;
|
|
82
|
+
/** @internal */
|
|
83
|
+
export declare const AuthenticateSuccessResponseUserToken$inboundSchema: z.ZodType<AuthenticateSuccessResponseUserToken, z.ZodTypeDef, unknown>;
|
|
84
|
+
export declare function authenticateSuccessResponseUserTokenFromJSON(jsonString: string): SafeParseResult<AuthenticateSuccessResponseUserToken, SDKValidationError>;
|
|
85
|
+
/** @internal */
|
|
86
|
+
export declare const AuthenticateSuccessResponseInventoryManager$inboundSchema: z.ZodType<AuthenticateSuccessResponseInventoryManager, z.ZodTypeDef, unknown>;
|
|
87
|
+
export declare function authenticateSuccessResponseInventoryManagerFromJSON(jsonString: string): SafeParseResult<AuthenticateSuccessResponseInventoryManager, SDKValidationError>;
|
|
88
|
+
/** @internal */
|
|
89
|
+
export declare const AuthenticateSuccessResponse$inboundSchema: z.ZodType<AuthenticateSuccessResponse, z.ZodTypeDef, unknown>;
|
|
90
|
+
export declare function authenticateSuccessResponseFromJSON(jsonString: string): SafeParseResult<AuthenticateSuccessResponse, SDKValidationError>;
|
|
91
|
+
//# sourceMappingURL=authenticatesuccessresponse.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authenticatesuccessresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/authenticatesuccessresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,OAAO,EAAyB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAyB,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,eAAe,EAEhB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAA6B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAwB,MAAM,aAAa,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;CAGvC,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CACzD,OAAO,oCAAoC,CAC5C,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,oCAAoC,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG,EAAE,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oCAAoC,CAAC;IAChD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,gBAAgB,CAAC,EAAE,2CAA2C,GAAG,SAAS,CAAC;IAC3E;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC;;;;;;;;;;;;;;OAcG;IACH,GAAG,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,kDAAkD,EAAE,CAAC,CAAC,OAAO,CACxE,oCAAoC,EACpC,CAAC,CAAC,UAAU,EACZ,OAAO,CACwD,CAAC;AAElE,gBAAgB;AAChB,eAAO,MAAM,kDAAkD,EAAE,CAAC,CAAC,OAAO,CACxE,oCAAoC,EACpC,CAAC,CAAC,UAAU,EACZ,OAAO,CAUP,CAAC;AAEH,wBAAgB,4CAA4C,CAC1D,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,oCAAoC,EAAE,kBAAkB,CAAC,CAO3E;AAED,gBAAgB;AAChB,eAAO,MAAM,yDAAyD,EACpE,CAAC,CAAC,OAAO,CACP,2CAA2C,EAC3C,CAAC,CAAC,UAAU,EACZ,OAAO,CACO,CAAC;AAEnB,wBAAgB,mDAAmD,CACjE,UAAU,EAAE,MAAM,GACjB,eAAe,CAChB,2CAA2C,EAC3C,kBAAkB,CACnB,CASA;AAED,gBAAgB;AAChB,eAAO,MAAM,yCAAyC,EAAE,CAAC,CAAC,OAAO,CAC/D,2BAA2B,EAC3B,CAAC,CAAC,UAAU,EACZ,OAAO,CAmBP,CAAC;AAEH,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAMlE"}
|
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
/*
|
|
2
|
+
* Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
|
|
3
|
+
*/
|
|
4
|
+
import * as z from "zod/v3";
|
|
5
|
+
import { remap as remap$ } from "../../lib/primitives.js";
|
|
6
|
+
import { safeParse } from "../../lib/schemas.js";
|
|
7
|
+
import * as openEnums from "../../types/enums.js";
|
|
8
|
+
import * as types from "../../types/primitives.js";
|
|
9
|
+
import { Company$inboundSchema } from "./company.js";
|
|
10
|
+
import { Contact$inboundSchema } from "./contact.js";
|
|
11
|
+
import { SsoContinuation$inboundSchema, } from "./ssocontinuation.js";
|
|
12
|
+
import { UserDetails$inboundSchema } from "./userdetails.js";
|
|
13
|
+
import { Vendor$inboundSchema } from "./vendor.js";
|
|
14
|
+
/**
|
|
15
|
+
* A `permanent` user token can be used to access any API endpoint as the logged in user. A `one time` token is used to authenticate the user once.
|
|
16
|
+
*/
|
|
17
|
+
export const AuthenticateSuccessResponseTokenType = {
|
|
18
|
+
Permanent: "permanent",
|
|
19
|
+
OneTime: "one time",
|
|
20
|
+
};
|
|
21
|
+
/** @internal */
|
|
22
|
+
export const AuthenticateSuccessResponseTokenType$inboundSchema = openEnums.inboundSchema(AuthenticateSuccessResponseTokenType);
|
|
23
|
+
/** @internal */
|
|
24
|
+
export const AuthenticateSuccessResponseUserToken$inboundSchema = z.object({
|
|
25
|
+
token: types.string(),
|
|
26
|
+
token_type: AuthenticateSuccessResponseTokenType$inboundSchema.default("permanent"),
|
|
27
|
+
}).transform((v) => {
|
|
28
|
+
return remap$(v, {
|
|
29
|
+
"token_type": "tokenType",
|
|
30
|
+
});
|
|
31
|
+
});
|
|
32
|
+
export function authenticateSuccessResponseUserTokenFromJSON(jsonString) {
|
|
33
|
+
return safeParse(jsonString, (x) => AuthenticateSuccessResponseUserToken$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'AuthenticateSuccessResponseUserToken' from JSON`);
|
|
34
|
+
}
|
|
35
|
+
/** @internal */
|
|
36
|
+
export const AuthenticateSuccessResponseInventoryManager$inboundSchema = z.object({});
|
|
37
|
+
export function authenticateSuccessResponseInventoryManagerFromJSON(jsonString) {
|
|
38
|
+
return safeParse(jsonString, (x) => AuthenticateSuccessResponseInventoryManager$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'AuthenticateSuccessResponseInventoryManager' from JSON`);
|
|
39
|
+
}
|
|
40
|
+
/** @internal */
|
|
41
|
+
export const AuthenticateSuccessResponse$inboundSchema = z.object({
|
|
42
|
+
is_gatekeeper: types.optional(types.boolean()),
|
|
43
|
+
success: types.boolean(),
|
|
44
|
+
user: UserDetails$inboundSchema,
|
|
45
|
+
user_token: z.lazy(() => AuthenticateSuccessResponseUserToken$inboundSchema),
|
|
46
|
+
vendor: types.optional(Vendor$inboundSchema),
|
|
47
|
+
inventory_manager: types.optional(z.lazy(() => AuthenticateSuccessResponseInventoryManager$inboundSchema)),
|
|
48
|
+
contact: z.nullable(Contact$inboundSchema).optional(),
|
|
49
|
+
company: z.nullable(Company$inboundSchema).optional(),
|
|
50
|
+
sso: types.optional(SsoContinuation$inboundSchema),
|
|
51
|
+
}).transform((v) => {
|
|
52
|
+
return remap$(v, {
|
|
53
|
+
"is_gatekeeper": "isGatekeeper",
|
|
54
|
+
"user_token": "userToken",
|
|
55
|
+
"inventory_manager": "inventoryManager",
|
|
56
|
+
});
|
|
57
|
+
});
|
|
58
|
+
export function authenticateSuccessResponseFromJSON(jsonString) {
|
|
59
|
+
return safeParse(jsonString, (x) => AuthenticateSuccessResponse$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'AuthenticateSuccessResponse' from JSON`);
|
|
60
|
+
}
|
|
61
|
+
//# sourceMappingURL=authenticatesuccessresponse.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authenticatesuccessresponse.js","sourceRoot":"","sources":["../../../../src/models/components/authenticatesuccessresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAGlD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAEnD,OAAO,EAAW,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAW,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAe,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAU,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,UAAU;CACX,CAAC;AAsEX,gBAAgB;AAChB,MAAM,CAAC,MAAM,kDAAkD,GAI3D,SAAS,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAAC;AAElE,gBAAgB;AAChB,MAAM,CAAC,MAAM,kDAAkD,GAI3D,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,kDAAkD,CAAC,OAAO,CACpE,WAAW,CACZ;CACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,4CAA4C,CAC1D,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CACJ,kDAAkD,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACzE,kEAAkE,CACnE,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,yDAAyD,GAKhE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEnB,MAAM,UAAU,mDAAmD,CACjE,UAAkB;IAKlB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CACJ,yDAAyD,CAAC,KAAK,CAC7D,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CACd,EACH,yEAAyE,CAC1E,CAAC;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,CAAC,MAAM,yCAAyC,GAIlD,CAAC,CAAC,MAAM,CAAC;IACX,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC9C,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,IAAI,EAAE,yBAAyB;IAC/B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,kDAAkD,CAAC;IAC5E,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC5C,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAC/B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,yDAAyD,CAAC,CACxE;IACD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACnD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;QACzB,mBAAmB,EAAE,kBAAkB;KACxC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,mCAAmC,CACjD,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,yCAAyC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACrE,yDAAyD,CAC1D,CAAC;AACJ,CAAC"}
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
export * from "./activestatus.js";
|
|
2
2
|
export * from "./alert.js";
|
|
3
3
|
export * from "./appointmentsummary.js";
|
|
4
|
+
export * from "./authenticatesuccessresponse.js";
|
|
4
5
|
export * from "./backgroundcheckresult.js";
|
|
5
6
|
export * from "./company.js";
|
|
6
7
|
export * from "./companycredentiallistitem.js";
|
|
@@ -85,6 +86,7 @@ export * from "./screeningansweractionsummary.js";
|
|
|
85
86
|
export * from "./screeningquestion.js";
|
|
86
87
|
export * from "./screeningresponse.js";
|
|
87
88
|
export * from "./security.js";
|
|
89
|
+
export * from "./ssocontinuation.js";
|
|
88
90
|
export * from "./standingappointment.js";
|
|
89
91
|
export * from "./state.js";
|
|
90
92
|
export * from "./subscription.js";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/models/components/index.ts"],"names":[],"mappings":"AAIA,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kDAAkD,CAAC;AACjE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/models/components/index.ts"],"names":[],"mappings":"AAIA,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kDAAkD,CAAC;AACjE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}
|
|
@@ -4,6 +4,7 @@
|
|
|
4
4
|
export * from "./activestatus.js";
|
|
5
5
|
export * from "./alert.js";
|
|
6
6
|
export * from "./appointmentsummary.js";
|
|
7
|
+
export * from "./authenticatesuccessresponse.js";
|
|
7
8
|
export * from "./backgroundcheckresult.js";
|
|
8
9
|
export * from "./company.js";
|
|
9
10
|
export * from "./companycredentiallistitem.js";
|
|
@@ -88,6 +89,7 @@ export * from "./screeningansweractionsummary.js";
|
|
|
88
89
|
export * from "./screeningquestion.js";
|
|
89
90
|
export * from "./screeningresponse.js";
|
|
90
91
|
export * from "./security.js";
|
|
92
|
+
export * from "./ssocontinuation.js";
|
|
91
93
|
export * from "./standingappointment.js";
|
|
92
94
|
export * from "./state.js";
|
|
93
95
|
export * from "./subscription.js";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/models/components/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kDAAkD,CAAC;AACjE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/models/components/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kDAAkD,CAAC;AACjE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}
|
|
@@ -15,12 +15,46 @@ export type LoginEmailAndPassword = {
|
|
|
15
15
|
* Password as entered by the user
|
|
16
16
|
*/
|
|
17
17
|
password: string;
|
|
18
|
+
/**
|
|
19
|
+
* Opaque, signed state that Green Security issues when a third-party service
|
|
20
|
+
*
|
|
21
|
+
* @remarks
|
|
22
|
+
* provider starts a "Login with Green Security" SAML flow at
|
|
23
|
+
* `/saml/idp/sso`. The login screen receives it as the `sso_state` query
|
|
24
|
+
* string parameter and must pass it back, byte for byte, on every call to
|
|
25
|
+
* this endpoint for the remainder of the login journey — including the
|
|
26
|
+
* second call that carries an `mfa_code`.
|
|
27
|
+
*
|
|
28
|
+
* The blob is signed, not encrypted, and it expires five minutes after the
|
|
29
|
+
* service provider's request arrives. Do not parse it, shorten it, decode
|
|
30
|
+
* it, or re-encode it.
|
|
31
|
+
*
|
|
32
|
+
* **An invalid blob does not fail the login.** This is the opposite of what
|
|
33
|
+
* most integrators assume, so it is worth stating plainly: a forged, edited
|
|
34
|
+
* or expired `sso_state` is silently discarded, and the request then
|
|
35
|
+
* proceeds as an ordinary login. Valid credentials still authenticate and
|
|
36
|
+
* still return `200` — just with no `sso` object, leaving the user signed in
|
|
37
|
+
* to Green Security with no way back to the service provider that sent them.
|
|
38
|
+
* Never treat a `200` as proof that the SSO hand-off survived; check for
|
|
39
|
+
* `sso` explicitly.
|
|
40
|
+
*
|
|
41
|
+
* Every `202` response echoes the *verified* blob back in its own
|
|
42
|
+
* `sso_state` field. Always send back the value from the response you just
|
|
43
|
+
* received rather than the one you started with, so that a blob the server
|
|
44
|
+
* has already rejected is never resent, and so a client does not have to
|
|
45
|
+
* hold state of its own across the login journey.
|
|
46
|
+
*
|
|
47
|
+
* Omit this field entirely for an ordinary login that did not originate
|
|
48
|
+
* from a service provider.
|
|
49
|
+
*/
|
|
50
|
+
ssoState?: string | undefined;
|
|
18
51
|
};
|
|
19
52
|
/** @internal */
|
|
20
53
|
export type LoginEmailAndPassword$Outbound = {
|
|
21
54
|
email: string;
|
|
22
55
|
mfa_code?: string | undefined;
|
|
23
56
|
password: string;
|
|
57
|
+
sso_state?: string | undefined;
|
|
24
58
|
};
|
|
25
59
|
/** @internal */
|
|
26
60
|
export declare const LoginEmailAndPassword$outboundSchema: z.ZodType<LoginEmailAndPassword$Outbound, z.ZodTypeDef, LoginEmailAndPassword>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"loginemailandpassword.d.ts","sourceRoot":"","sources":["../../../../src/models/components/loginemailandpassword.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"loginemailandpassword.d.ts","sourceRoot":"","sources":["../../../../src/models/components/loginemailandpassword.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,8BAA8B,GAAG;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,OAAO,CAC1D,8BAA8B,EAC9B,CAAC,CAAC,UAAU,EACZ,qBAAqB,CAWrB,CAAC;AAEH,wBAAgB,2BAA2B,CACzC,qBAAqB,EAAE,qBAAqB,GAC3C,MAAM,CAIR"}
|
|
@@ -8,9 +8,11 @@ export const LoginEmailAndPassword$outboundSchema = z.object({
|
|
|
8
8
|
email: z.string(),
|
|
9
9
|
mfaCode: z.string().optional(),
|
|
10
10
|
password: z.string(),
|
|
11
|
+
ssoState: z.string().optional(),
|
|
11
12
|
}).transform((v) => {
|
|
12
13
|
return remap$(v, {
|
|
13
14
|
mfaCode: "mfa_code",
|
|
15
|
+
ssoState: "sso_state",
|
|
14
16
|
});
|
|
15
17
|
});
|
|
16
18
|
export function loginEmailAndPasswordToJSON(loginEmailAndPassword) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"loginemailandpassword.js","sourceRoot":"","sources":["../../../../src/models/components/loginemailandpassword.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;
|
|
1
|
+
{"version":3,"file":"loginemailandpassword.js","sourceRoot":"","sources":["../../../../src/models/components/loginemailandpassword.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AA6D1D,gBAAgB;AAChB,MAAM,CAAC,MAAM,oCAAoC,GAI7C,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CACzC,qBAA4C;IAE5C,OAAO,IAAI,CAAC,SAAS,CACnB,oCAAoC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAClE,CAAC;AACJ,CAAC"}
|
|
@@ -11,11 +11,45 @@ export type LoginRequirementsFromEmail = {
|
|
|
11
11
|
* A proper URI where the user should be sent after completing a SAML login. This is encoded into the response you will get if the user requires a SAML login.
|
|
12
12
|
*/
|
|
13
13
|
returnUrl: string;
|
|
14
|
+
/**
|
|
15
|
+
* Opaque, signed state that Green Security issues when a third-party service
|
|
16
|
+
*
|
|
17
|
+
* @remarks
|
|
18
|
+
* provider starts a "Login with Green Security" SAML flow at
|
|
19
|
+
* `/saml/idp/sso`. The login screen receives it as the `sso_state` query
|
|
20
|
+
* string parameter and must pass it back, byte for byte, on every call to
|
|
21
|
+
* this endpoint for the remainder of the login journey — including the
|
|
22
|
+
* second call that carries an `mfa_code`.
|
|
23
|
+
*
|
|
24
|
+
* The blob is signed, not encrypted, and it expires five minutes after the
|
|
25
|
+
* service provider's request arrives. Do not parse it, shorten it, decode
|
|
26
|
+
* it, or re-encode it.
|
|
27
|
+
*
|
|
28
|
+
* **An invalid blob does not fail the login.** This is the opposite of what
|
|
29
|
+
* most integrators assume, so it is worth stating plainly: a forged, edited
|
|
30
|
+
* or expired `sso_state` is silently discarded, and the request then
|
|
31
|
+
* proceeds as an ordinary login. Valid credentials still authenticate and
|
|
32
|
+
* still return `200` — just with no `sso` object, leaving the user signed in
|
|
33
|
+
* to Green Security with no way back to the service provider that sent them.
|
|
34
|
+
* Never treat a `200` as proof that the SSO hand-off survived; check for
|
|
35
|
+
* `sso` explicitly.
|
|
36
|
+
*
|
|
37
|
+
* Every `202` response echoes the *verified* blob back in its own
|
|
38
|
+
* `sso_state` field. Always send back the value from the response you just
|
|
39
|
+
* received rather than the one you started with, so that a blob the server
|
|
40
|
+
* has already rejected is never resent, and so a client does not have to
|
|
41
|
+
* hold state of its own across the login journey.
|
|
42
|
+
*
|
|
43
|
+
* Omit this field entirely for an ordinary login that did not originate
|
|
44
|
+
* from a service provider.
|
|
45
|
+
*/
|
|
46
|
+
ssoState?: string | undefined;
|
|
14
47
|
};
|
|
15
48
|
/** @internal */
|
|
16
49
|
export type LoginRequirementsFromEmail$Outbound = {
|
|
17
50
|
email: string;
|
|
18
51
|
return_url: string;
|
|
52
|
+
sso_state?: string | undefined;
|
|
19
53
|
};
|
|
20
54
|
/** @internal */
|
|
21
55
|
export declare const LoginRequirementsFromEmail$outboundSchema: z.ZodType<LoginRequirementsFromEmail$Outbound, z.ZodTypeDef, LoginRequirementsFromEmail>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"loginrequirementsfromemail.d.ts","sourceRoot":"","sources":["../../../../src/models/components/loginrequirementsfromemail.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"loginrequirementsfromemail.d.ts","sourceRoot":"","sources":["../../../../src/models/components/loginrequirementsfromemail.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,mCAAmC,GAAG;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,yCAAyC,EAAE,CAAC,CAAC,OAAO,CAC/D,mCAAmC,EACnC,CAAC,CAAC,UAAU,EACZ,0BAA0B,CAU1B,CAAC;AAEH,wBAAgB,gCAAgC,CAC9C,0BAA0B,EAAE,0BAA0B,GACrD,MAAM,CAIR"}
|
|
@@ -7,9 +7,11 @@ import { remap as remap$ } from "../../lib/primitives.js";
|
|
|
7
7
|
export const LoginRequirementsFromEmail$outboundSchema = z.object({
|
|
8
8
|
email: z.string(),
|
|
9
9
|
returnUrl: z.string(),
|
|
10
|
+
ssoState: z.string().optional(),
|
|
10
11
|
}).transform((v) => {
|
|
11
12
|
return remap$(v, {
|
|
12
13
|
returnUrl: "return_url",
|
|
14
|
+
ssoState: "sso_state",
|
|
13
15
|
});
|
|
14
16
|
});
|
|
15
17
|
export function loginRequirementsFromEmailToJSON(loginRequirementsFromEmail) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"loginrequirementsfromemail.js","sourceRoot":"","sources":["../../../../src/models/components/loginrequirementsfromemail.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;
|
|
1
|
+
{"version":3,"file":"loginrequirementsfromemail.js","sourceRoot":"","sources":["../../../../src/models/components/loginrequirementsfromemail.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAwD1D,gBAAgB;AAChB,MAAM,CAAC,MAAM,yCAAyC,GAIlD,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,gCAAgC,CAC9C,0BAAsD;IAEtD,OAAO,IAAI,CAAC,SAAS,CACnB,yCAAyC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAC5E,CAAC;AACJ,CAAC"}
|
|
@@ -26,6 +26,39 @@ export type MfaRequiredResponse = {
|
|
|
26
26
|
*/
|
|
27
27
|
mobilePhone?: string | undefined;
|
|
28
28
|
mfaMethod?: MfaMethod | undefined;
|
|
29
|
+
/**
|
|
30
|
+
* Opaque, signed state that Green Security issues when a third-party service
|
|
31
|
+
*
|
|
32
|
+
* @remarks
|
|
33
|
+
* provider starts a "Login with Green Security" SAML flow at
|
|
34
|
+
* `/saml/idp/sso`. The login screen receives it as the `sso_state` query
|
|
35
|
+
* string parameter and must pass it back, byte for byte, on every call to
|
|
36
|
+
* this endpoint for the remainder of the login journey — including the
|
|
37
|
+
* second call that carries an `mfa_code`.
|
|
38
|
+
*
|
|
39
|
+
* The blob is signed, not encrypted, and it expires five minutes after the
|
|
40
|
+
* service provider's request arrives. Do not parse it, shorten it, decode
|
|
41
|
+
* it, or re-encode it.
|
|
42
|
+
*
|
|
43
|
+
* **An invalid blob does not fail the login.** This is the opposite of what
|
|
44
|
+
* most integrators assume, so it is worth stating plainly: a forged, edited
|
|
45
|
+
* or expired `sso_state` is silently discarded, and the request then
|
|
46
|
+
* proceeds as an ordinary login. Valid credentials still authenticate and
|
|
47
|
+
* still return `200` — just with no `sso` object, leaving the user signed in
|
|
48
|
+
* to Green Security with no way back to the service provider that sent them.
|
|
49
|
+
* Never treat a `200` as proof that the SSO hand-off survived; check for
|
|
50
|
+
* `sso` explicitly.
|
|
51
|
+
*
|
|
52
|
+
* Every `202` response echoes the *verified* blob back in its own
|
|
53
|
+
* `sso_state` field. Always send back the value from the response you just
|
|
54
|
+
* received rather than the one you started with, so that a blob the server
|
|
55
|
+
* has already rejected is never resent, and so a client does not have to
|
|
56
|
+
* hold state of its own across the login journey.
|
|
57
|
+
*
|
|
58
|
+
* Omit this field entirely for an ordinary login that did not originate
|
|
59
|
+
* from a service provider.
|
|
60
|
+
*/
|
|
61
|
+
ssoState?: string | undefined;
|
|
29
62
|
};
|
|
30
63
|
/** @internal */
|
|
31
64
|
export declare const MfaMethod$inboundSchema: z.ZodType<MfaMethod, z.ZodTypeDef, unknown>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mfarequiredresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/mfarequiredresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,eAAO,MAAM,SAAS;;;CAGZ,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;
|
|
1
|
+
{"version":3,"file":"mfarequiredresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/mfarequiredresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,eAAO,MAAM,SAAS;;;CAGZ,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAC7C,SAAS,EACT,CAAC,CAAC,UAAU,EACZ,OAAO,CAC6B,CAAC;AAEvC,gBAAgB;AAChB,eAAO,MAAM,iCAAiC,EAAE,CAAC,CAAC,OAAO,CACvD,mBAAmB,EACnB,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAM1D"}
|
|
@@ -19,10 +19,12 @@ export const MfaRequiredResponse$inboundSchema = z.object({
|
|
|
19
19
|
error: types.string(),
|
|
20
20
|
mobile_phone: types.optional(types.string()),
|
|
21
21
|
mfa_method: types.optional(MfaMethod$inboundSchema),
|
|
22
|
+
sso_state: types.optional(types.string()),
|
|
22
23
|
}).transform((v) => {
|
|
23
24
|
return remap$(v, {
|
|
24
25
|
"mobile_phone": "mobilePhone",
|
|
25
26
|
"mfa_method": "mfaMethod",
|
|
27
|
+
"sso_state": "ssoState",
|
|
26
28
|
});
|
|
27
29
|
});
|
|
28
30
|
export function mfaRequiredResponseFromJSON(jsonString) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mfarequiredresponse.js","sourceRoot":"","sources":["../../../../src/models/components/mfarequiredresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAGlD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAGnD,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACN,CAAC;
|
|
1
|
+
{"version":3,"file":"mfarequiredresponse.js","sourceRoot":"","sources":["../../../../src/models/components/mfarequiredresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAGlD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAGnD,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACN,CAAC;AAyDX,gBAAgB;AAChB,MAAM,CAAC,MAAM,uBAAuB,GAIhC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAEvC,gBAAgB;AAChB,MAAM,CAAC,MAAM,iCAAiC,GAI1C,CAAC,CAAC,MAAM,CAAC;IACX,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;IACnC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5C,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACnD,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;QAC7B,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,UAAU;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CACzC,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC7D,iDAAiD,CAClD,CAAC;AACJ,CAAC"}
|
|
@@ -12,9 +12,42 @@ export type PasswordNotSetResponse = {
|
|
|
12
12
|
*/
|
|
13
13
|
error: string;
|
|
14
14
|
/**
|
|
15
|
-
* URL to redirect the user to set their password (forgot password flow).
|
|
15
|
+
* URL to redirect the user to set their password (forgot password flow). Carries the `return_url` and `sso_state` query params when those were provided on the request, because the browser follows this redirect and leaves the JSON body behind.
|
|
16
16
|
*/
|
|
17
17
|
redirectUrl: string;
|
|
18
|
+
/**
|
|
19
|
+
* Opaque, signed state that Green Security issues when a third-party service
|
|
20
|
+
*
|
|
21
|
+
* @remarks
|
|
22
|
+
* provider starts a "Login with Green Security" SAML flow at
|
|
23
|
+
* `/saml/idp/sso`. The login screen receives it as the `sso_state` query
|
|
24
|
+
* string parameter and must pass it back, byte for byte, on every call to
|
|
25
|
+
* this endpoint for the remainder of the login journey — including the
|
|
26
|
+
* second call that carries an `mfa_code`.
|
|
27
|
+
*
|
|
28
|
+
* The blob is signed, not encrypted, and it expires five minutes after the
|
|
29
|
+
* service provider's request arrives. Do not parse it, shorten it, decode
|
|
30
|
+
* it, or re-encode it.
|
|
31
|
+
*
|
|
32
|
+
* **An invalid blob does not fail the login.** This is the opposite of what
|
|
33
|
+
* most integrators assume, so it is worth stating plainly: a forged, edited
|
|
34
|
+
* or expired `sso_state` is silently discarded, and the request then
|
|
35
|
+
* proceeds as an ordinary login. Valid credentials still authenticate and
|
|
36
|
+
* still return `200` — just with no `sso` object, leaving the user signed in
|
|
37
|
+
* to Green Security with no way back to the service provider that sent them.
|
|
38
|
+
* Never treat a `200` as proof that the SSO hand-off survived; check for
|
|
39
|
+
* `sso` explicitly.
|
|
40
|
+
*
|
|
41
|
+
* Every `202` response echoes the *verified* blob back in its own
|
|
42
|
+
* `sso_state` field. Always send back the value from the response you just
|
|
43
|
+
* received rather than the one you started with, so that a blob the server
|
|
44
|
+
* has already rejected is never resent, and so a client does not have to
|
|
45
|
+
* hold state of its own across the login journey.
|
|
46
|
+
*
|
|
47
|
+
* Omit this field entirely for an ordinary login that did not originate
|
|
48
|
+
* from a service provider.
|
|
49
|
+
*/
|
|
50
|
+
ssoState?: string | undefined;
|
|
18
51
|
};
|
|
19
52
|
/** @internal */
|
|
20
53
|
export declare const PasswordNotSetResponse$inboundSchema: z.ZodType<PasswordNotSetResponse, z.ZodTypeDef, unknown>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"passwordnotsetresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/passwordnotsetresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"passwordnotsetresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/passwordnotsetresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,OAAO,CAC1D,sBAAsB,EACtB,CAAC,CAAC,UAAU,EACZ,OAAO,CAYP,CAAC;AAEH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAM7D"}
|
|
@@ -11,9 +11,11 @@ export const PasswordNotSetResponse$inboundSchema = z.object({
|
|
|
11
11
|
success: types.boolean(),
|
|
12
12
|
error: types.string(),
|
|
13
13
|
redirect_url: types.string(),
|
|
14
|
+
sso_state: types.optional(types.string()),
|
|
14
15
|
}).transform((v) => {
|
|
15
16
|
return remap$(v, {
|
|
16
17
|
"redirect_url": "redirectUrl",
|
|
18
|
+
"sso_state": "ssoState",
|
|
17
19
|
});
|
|
18
20
|
});
|
|
19
21
|
export function passwordNotSetResponseFromJSON(jsonString) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"passwordnotsetresponse.js","sourceRoot":"","sources":["../../../../src/models/components/passwordnotsetresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;
|
|
1
|
+
{"version":3,"file":"passwordnotsetresponse.js","sourceRoot":"","sources":["../../../../src/models/components/passwordnotsetresponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAC;AAoDnD,gBAAgB;AAChB,MAAM,CAAC,MAAM,oCAAoC,GAI7C,CAAC,CAAC,MAAM,CAAC;IACX,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACzC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;IAC5B,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,UAAU;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,8BAA8B,CAC5C,UAAkB;IAElB,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChE,oDAAoD,CACrD,CAAC;AACJ,CAAC"}
|
|
@@ -11,6 +11,39 @@ export type PasswordRequiredResponse = {
|
|
|
11
11
|
* Error describing the exact condition of what further steps are needed to finish the login process.
|
|
12
12
|
*/
|
|
13
13
|
error: string;
|
|
14
|
+
/**
|
|
15
|
+
* Opaque, signed state that Green Security issues when a third-party service
|
|
16
|
+
*
|
|
17
|
+
* @remarks
|
|
18
|
+
* provider starts a "Login with Green Security" SAML flow at
|
|
19
|
+
* `/saml/idp/sso`. The login screen receives it as the `sso_state` query
|
|
20
|
+
* string parameter and must pass it back, byte for byte, on every call to
|
|
21
|
+
* this endpoint for the remainder of the login journey — including the
|
|
22
|
+
* second call that carries an `mfa_code`.
|
|
23
|
+
*
|
|
24
|
+
* The blob is signed, not encrypted, and it expires five minutes after the
|
|
25
|
+
* service provider's request arrives. Do not parse it, shorten it, decode
|
|
26
|
+
* it, or re-encode it.
|
|
27
|
+
*
|
|
28
|
+
* **An invalid blob does not fail the login.** This is the opposite of what
|
|
29
|
+
* most integrators assume, so it is worth stating plainly: a forged, edited
|
|
30
|
+
* or expired `sso_state` is silently discarded, and the request then
|
|
31
|
+
* proceeds as an ordinary login. Valid credentials still authenticate and
|
|
32
|
+
* still return `200` — just with no `sso` object, leaving the user signed in
|
|
33
|
+
* to Green Security with no way back to the service provider that sent them.
|
|
34
|
+
* Never treat a `200` as proof that the SSO hand-off survived; check for
|
|
35
|
+
* `sso` explicitly.
|
|
36
|
+
*
|
|
37
|
+
* Every `202` response echoes the *verified* blob back in its own
|
|
38
|
+
* `sso_state` field. Always send back the value from the response you just
|
|
39
|
+
* received rather than the one you started with, so that a blob the server
|
|
40
|
+
* has already rejected is never resent, and so a client does not have to
|
|
41
|
+
* hold state of its own across the login journey.
|
|
42
|
+
*
|
|
43
|
+
* Omit this field entirely for an ordinary login that did not originate
|
|
44
|
+
* from a service provider.
|
|
45
|
+
*/
|
|
46
|
+
ssoState?: string | undefined;
|
|
14
47
|
};
|
|
15
48
|
/** @internal */
|
|
16
49
|
export declare const PasswordRequiredResponse$inboundSchema: z.ZodType<PasswordRequiredResponse, z.ZodTypeDef, unknown>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"passwordrequiredresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/passwordrequiredresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;
|
|
1
|
+
{"version":3,"file":"passwordrequiredresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/passwordrequiredresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,sCAAsC,EAAE,CAAC,CAAC,OAAO,CAC5D,wBAAwB,EACxB,CAAC,CAAC,UAAU,EACZ,OAAO,CAUP,CAAC;AAEH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,CAM/D"}
|
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
* Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
|
|
3
3
|
*/
|
|
4
4
|
import * as z from "zod/v3";
|
|
5
|
+
import { remap as remap$ } from "../../lib/primitives.js";
|
|
5
6
|
import { safeParse } from "../../lib/schemas.js";
|
|
6
7
|
import * as types from "../../types/primitives.js";
|
|
7
8
|
/** @internal */
|
|
@@ -9,6 +10,11 @@ export const PasswordRequiredResponse$inboundSchema = z.object({
|
|
|
9
10
|
requires: types.literal("password"),
|
|
10
11
|
success: types.boolean(),
|
|
11
12
|
error: types.string(),
|
|
13
|
+
sso_state: types.optional(types.string()),
|
|
14
|
+
}).transform((v) => {
|
|
15
|
+
return remap$(v, {
|
|
16
|
+
"sso_state": "ssoState",
|
|
17
|
+
});
|
|
12
18
|
});
|
|
13
19
|
export function passwordRequiredResponseFromJSON(jsonString) {
|
|
14
20
|
return safeParse(jsonString, (x) => PasswordRequiredResponse$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'PasswordRequiredResponse' from JSON`);
|