@greensecurity/javascript-sdk 0.46.0-beta.9 → 0.46.0

package/dist/esm/react-query/appsSetAppSecret.d.ts

@@ -1,70 +0,0 @@
-import { MutationKey, UseMutationResult } from "@tanstack/react-query";
-import { GreenSecurityCore } from "../core.js";
-import { RequestOptions } from "../lib/sdks.js";
-import * as components from "../models/components/index.js";
-import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
-import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
-import * as errors from "../models/errors/index.js";
-import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
-import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
-import { MutationHookOptions } from "./_types.js";
-export type AppsSetAppSecretMutationVariables = {
-    request: components.AppSecretSetRequest;
-    options?: RequestOptions;
-};
-export type AppsSetAppSecretMutationData = components.AppSecret;
-export type AppsSetAppSecretMutationError = errors.ApiErrorResponse | errors.AppSecretsUnprocessable | GreenSecurityError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
-/**
- * Set an app secret
- *
- * @remarks
- * Creates a secret, or replaces the payload and expiry of the secret with the same `name`
- * in the same scope. Secrets are encrypted at rest and belong to one activation of your
- * app: the app token's own activation, or the `activation_id` the service account sends.
- * Removing that activation, or changing what it covers (its app, or the site, system,
- * facility, company or user it is installed for), deletes all of its secrets.
- *
- * Each scope holds at most 25 secrets, and a payload is at most 8192 bytes once UTF-8
- * encoded (fewer characters than that if it has multi-byte ones). `expires_at`, when
- * given, must be in the future and less than 100 years away.
- *
- * **Permissions.** Send one of these as `Authorization: Bearer`; any other token is refused
- * with `403`.
- *
- * - **An app token**: an app user token (`gsu_`) or an app installation token (`gsi_`). The
- *   activation comes from the token, so leave `activation_id` out; if you send it, it must be
- *   the token's own activation (`403` otherwise). Either token may write to the `installation`
- *   scope. For the `user` scope:
- *   - an app user token reaches only its own user (`user_id` may be left out);
- *   - an installation token the host minted for one of your views reaches only that view's
- *     viewer (`user_id` may be left out);
- *   - an installation token from `client_credentials` reaches any user its activation
- *     covers, and `user_id` is required.
- * - **Your app's service account**: its permanent token, or a short-lived OAuth access token
- *   issued to it without `scope` (by `client_credentials` without `activation_id`, or by the
- *   `refresh_token` grant). A token issued with `scope` is refused with `403`, and any other
- *   kind of token, such as a one-time sign-in link token, with `403` "This kind of token may
- *   not access app secrets". It has no activation of its own, so `activation_id` is required
- *   (`422` without it) and must be one of your app's activations (`403` otherwise). Its `user`
- *   scope reaches any user the activation covers, and `user_id` is required.
- *
- * A `user_id` that does not exist and one the token may not reach get the same `403` "This
- * credential may not access secrets of that user", so the endpoint never reveals which user
- * ids exist.
- *
- * Whatever the token, your app must hold the platform permission `app_secrets.write`: list
- * it in the manifest's `permissions` and upload. Until then every Secret Store call is
- * refused with `403` "This app has not been granted app_secrets.write." For the service
- * account this is checked before `activation_id` is looked at, so an app without the
- * permission gets that answer whether or not it sent an `activation_id`.
- *
- * Every response carries `Cache-Control: no-store`, errors included, so no cache keeps a
- * secret.
- */
-export declare function useAppsSetAppSecretMutation(options?: MutationHookOptions<AppsSetAppSecretMutationData, AppsSetAppSecretMutationError, AppsSetAppSecretMutationVariables>): UseMutationResult<AppsSetAppSecretMutationData, AppsSetAppSecretMutationError, AppsSetAppSecretMutationVariables>;
-export declare function mutationKeyAppsSetAppSecret(): MutationKey;
-export declare function buildAppsSetAppSecretMutation(client$: GreenSecurityCore, hookOptions?: RequestOptions): {
-    mutationKey: MutationKey;
-    mutationFn: (variables: AppsSetAppSecretMutationVariables) => Promise<AppsSetAppSecretMutationData>;
-};
-//# sourceMappingURL=appsSetAppSecret.d.ts.map

package/dist/esm/react-query/appsSetAppSecret.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"appsSetAppSecret.d.ts","sourceRoot":"","sources":["../../../src/react-query/appsSetAppSecret.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC;IACxC,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,UAAU,CAAC,SAAS,CAAC;AAEhE,MAAM,MAAM,6BAA6B,GACrC,MAAM,CAAC,gBAAgB,GACvB,MAAM,CAAC,uBAAuB,GAC9B,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,CAAC,EAAE,mBAAmB,CAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,iCAAiC,CAClC,GACA,iBAAiB,CAClB,4BAA4B,EAC5B,6BAA6B,EAC7B,iCAAiC,CAClC,CAMA;AAED,wBAAgB,2BAA2B,IAAI,WAAW,CAEzD;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,cAAc,GAC3B;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,CACV,SAAS,EAAE,iCAAiC,KACzC,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC5C,CA0BA"}

package/dist/esm/react-query/appsSetAppSecret.js

@@ -1,83 +0,0 @@
-/*
- * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
- */
-import { useMutation, } from "@tanstack/react-query";
-import { appsSetAppSecret } from "../funcs/appsSetAppSecret.js";
-import { combineSignals } from "../lib/primitives.js";
-import { unwrapAsync } from "../types/fp.js";
-import { useGreenSecurityContext } from "./_context.js";
-/**
- * Set an app secret
- *
- * @remarks
- * Creates a secret, or replaces the payload and expiry of the secret with the same `name`
- * in the same scope. Secrets are encrypted at rest and belong to one activation of your
- * app: the app token's own activation, or the `activation_id` the service account sends.
- * Removing that activation, or changing what it covers (its app, or the site, system,
- * facility, company or user it is installed for), deletes all of its secrets.
- *
- * Each scope holds at most 25 secrets, and a payload is at most 8192 bytes once UTF-8
- * encoded (fewer characters than that if it has multi-byte ones). `expires_at`, when
- * given, must be in the future and less than 100 years away.
- *
- * **Permissions.** Send one of these as `Authorization: Bearer`; any other token is refused
- * with `403`.
- *
- * - **An app token**: an app user token (`gsu_`) or an app installation token (`gsi_`). The
- *   activation comes from the token, so leave `activation_id` out; if you send it, it must be
- *   the token's own activation (`403` otherwise). Either token may write to the `installation`
- *   scope. For the `user` scope:
- *   - an app user token reaches only its own user (`user_id` may be left out);
- *   - an installation token the host minted for one of your views reaches only that view's
- *     viewer (`user_id` may be left out);
- *   - an installation token from `client_credentials` reaches any user its activation
- *     covers, and `user_id` is required.
- * - **Your app's service account**: its permanent token, or a short-lived OAuth access token
- *   issued to it without `scope` (by `client_credentials` without `activation_id`, or by the
- *   `refresh_token` grant). A token issued with `scope` is refused with `403`, and any other
- *   kind of token, such as a one-time sign-in link token, with `403` "This kind of token may
- *   not access app secrets". It has no activation of its own, so `activation_id` is required
- *   (`422` without it) and must be one of your app's activations (`403` otherwise). Its `user`
- *   scope reaches any user the activation covers, and `user_id` is required.
- *
- * A `user_id` that does not exist and one the token may not reach get the same `403` "This
- * credential may not access secrets of that user", so the endpoint never reveals which user
- * ids exist.
- *
- * Whatever the token, your app must hold the platform permission `app_secrets.write`: list
- * it in the manifest's `permissions` and upload. Until then every Secret Store call is
- * refused with `403` "This app has not been granted app_secrets.write." For the service
- * account this is checked before `activation_id` is looked at, so an app without the
- * permission gets that answer whether or not it sent an `activation_id`.
- *
- * Every response carries `Cache-Control: no-store`, errors included, so no cache keeps a
- * secret.
- */
-export function useAppsSetAppSecretMutation(options) {
-    const client = useGreenSecurityContext();
-    return useMutation({
-        ...buildAppsSetAppSecretMutation(client, options),
-        ...options,
-    });
-}
-export function mutationKeyAppsSetAppSecret() {
-    return ["@greensecurity/javascript-sdk", "apps", "setAppSecret"];
-}
-export function buildAppsSetAppSecretMutation(client$, hookOptions) {
-    return {
-        mutationKey: mutationKeyAppsSetAppSecret(),
-        mutationFn: function appsSetAppSecretMutationFn({ request, options, }) {
-            const mergedOptions = {
-                ...hookOptions,
-                ...options,
-                fetchOptions: {
-                    ...hookOptions?.fetchOptions,
-                    ...options?.fetchOptions,
-                    signal: combineSignals(hookOptions?.fetchOptions?.signal, options?.fetchOptions?.signal),
-                },
-            };
-            return unwrapAsync(appsSetAppSecret(client$, request, mergedOptions));
-        },
-    };
-}
-//# sourceMappingURL=appsSetAppSecret.js.map

package/dist/esm/react-query/appsSetAppSecret.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"appsSetAppSecret.js","sourceRoot":"","sources":["../../../src/react-query/appsSetAppSecret.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAEL,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AActD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAsBxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAIC;IAMD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,WAAW,CAAC;QACjB,GAAG,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC;QACjD,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,+BAA+B,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAA0B,EAC1B,WAA4B;IAO5B,OAAO;QACL,WAAW,EAAE,2BAA2B,EAAE;QAC1C,UAAU,EAAE,SAAS,0BAA0B,CAAC,EAC9C,OAAO,EACP,OAAO,GACR;YACC,MAAM,aAAa,GAAG;gBACpB,GAAG,WAAW;gBACd,GAAG,OAAO;gBACV,YAAY,EAAE;oBACZ,GAAG,WAAW,EAAE,YAAY;oBAC5B,GAAG,OAAO,EAAE,YAAY;oBACxB,MAAM,EAAE,cAAc,CACpB,WAAW,EAAE,YAAY,EAAE,MAAM,EACjC,OAAO,EAAE,YAAY,EAAE,MAAM,CAC9B;iBACF;aACF,CAAC;YACF,OAAO,WAAW,CAAC,gBAAgB,CACjC,OAAO,EACP,OAAO,EACP,aAAa,CACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/react-query/oauthCreateDeviceAuthorization.d.ts

@@ -1,45 +0,0 @@
-import { MutationKey, UseMutationResult } from "@tanstack/react-query";
-import { GreenSecurityCore } from "../core.js";
-import { RequestOptions } from "../lib/sdks.js";
-import * as components from "../models/components/index.js";
-import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
-import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
-import * as errors from "../models/errors/index.js";
-import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
-import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
-import { MutationHookOptions } from "./_types.js";
-export type OauthCreateDeviceAuthorizationMutationVariables = {
-    request: components.DeviceAuthorizationRequest;
-    options?: RequestOptions;
-};
-export type OauthCreateDeviceAuthorizationMutationData = components.DeviceAuthorizationResponse;
-export type OauthCreateDeviceAuthorizationMutationError = errors.OAuthError | GreenSecurityError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
-/**
- * Start a device login
- *
- * @remarks
- * Starts the RFC 8628 device authorization flow that `apps-cli login` uses:
- *
- * 1. Call this endpoint and show the user `user_code`, or open `verification_uri_complete`.
- * 2. The user approves the request in the Green Security app, signed in as themselves.
- * 3. Meanwhile, poll `POST /oauth/token` with
- *    `grant_type=urn:ietf:params:oauth:grant-type:device_code` every `interval` seconds.
- *    It answers `authorization_pending` until the user approves, and then returns a
- *    15-minute developer CLI token and a refresh token that renews it, for up to 90 days.
- *
- * The codes expire after `expires_in` seconds. Each address may start 20 logins per ten
- * minutes; past that the endpoint answers `429` with `slow_down`. The request body may be
- * JSON or `application/x-www-form-urlencoded`.
- *
- * Every response, errors included, carries `Cache-Control: no-store` and `Pragma: no-cache`
- * (RFC 6749 section 5.1), so no cache keeps a token or code.
- *
- * **Permissions.** No authentication required.
- */
-export declare function useOauthCreateDeviceAuthorizationMutation(options?: MutationHookOptions<OauthCreateDeviceAuthorizationMutationData, OauthCreateDeviceAuthorizationMutationError, OauthCreateDeviceAuthorizationMutationVariables>): UseMutationResult<OauthCreateDeviceAuthorizationMutationData, OauthCreateDeviceAuthorizationMutationError, OauthCreateDeviceAuthorizationMutationVariables>;
-export declare function mutationKeyOauthCreateDeviceAuthorization(): MutationKey;
-export declare function buildOauthCreateDeviceAuthorizationMutation(client$: GreenSecurityCore, hookOptions?: RequestOptions): {
-    mutationKey: MutationKey;
-    mutationFn: (variables: OauthCreateDeviceAuthorizationMutationVariables) => Promise<OauthCreateDeviceAuthorizationMutationData>;
-};
-//# sourceMappingURL=oauthCreateDeviceAuthorization.d.ts.map

package/dist/esm/react-query/oauthCreateDeviceAuthorization.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauthCreateDeviceAuthorization.d.ts","sourceRoot":"","sources":["../../../src/react-query/oauthCreateDeviceAuthorization.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,+CAA+C,GAAG;IAC5D,OAAO,EAAE,UAAU,CAAC,0BAA0B,CAAC;IAC/C,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,0CAA0C,GACpD,UAAU,CAAC,2BAA2B,CAAC;AAEzC,MAAM,MAAM,2CAA2C,GACnD,MAAM,CAAC,UAAU,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yCAAyC,CACvD,OAAO,CAAC,EAAE,mBAAmB,CAC3B,0CAA0C,EAC1C,2CAA2C,EAC3C,+CAA+C,CAChD,GACA,iBAAiB,CAClB,0CAA0C,EAC1C,2CAA2C,EAC3C,+CAA+C,CAChD,CAMA;AAED,wBAAgB,yCAAyC,IAAI,WAAW,CAMvE;AAED,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,cAAc,GAC3B;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,CACV,SAAS,EAAE,+CAA+C,KACvD,OAAO,CAAC,0CAA0C,CAAC,CAAC;CAC1D,CA0BA"}

package/dist/esm/react-query/oauthCreateDeviceAuthorization.js

@@ -1,62 +0,0 @@
-/*
- * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
- */
-import { useMutation, } from "@tanstack/react-query";
-import { oauthCreateDeviceAuthorization } from "../funcs/oauthCreateDeviceAuthorization.js";
-import { combineSignals } from "../lib/primitives.js";
-import { unwrapAsync } from "../types/fp.js";
-import { useGreenSecurityContext } from "./_context.js";
-/**
- * Start a device login
- *
- * @remarks
- * Starts the RFC 8628 device authorization flow that `apps-cli login` uses:
- *
- * 1. Call this endpoint and show the user `user_code`, or open `verification_uri_complete`.
- * 2. The user approves the request in the Green Security app, signed in as themselves.
- * 3. Meanwhile, poll `POST /oauth/token` with
- *    `grant_type=urn:ietf:params:oauth:grant-type:device_code` every `interval` seconds.
- *    It answers `authorization_pending` until the user approves, and then returns a
- *    15-minute developer CLI token and a refresh token that renews it, for up to 90 days.
- *
- * The codes expire after `expires_in` seconds. Each address may start 20 logins per ten
- * minutes; past that the endpoint answers `429` with `slow_down`. The request body may be
- * JSON or `application/x-www-form-urlencoded`.
- *
- * Every response, errors included, carries `Cache-Control: no-store` and `Pragma: no-cache`
- * (RFC 6749 section 5.1), so no cache keeps a token or code.
- *
- * **Permissions.** No authentication required.
- */
-export function useOauthCreateDeviceAuthorizationMutation(options) {
-    const client = useGreenSecurityContext();
-    return useMutation({
-        ...buildOauthCreateDeviceAuthorizationMutation(client, options),
-        ...options,
-    });
-}
-export function mutationKeyOauthCreateDeviceAuthorization() {
-    return [
-        "@greensecurity/javascript-sdk",
-        "oauth",
-        "createDeviceAuthorization",
-    ];
-}
-export function buildOauthCreateDeviceAuthorizationMutation(client$, hookOptions) {
-    return {
-        mutationKey: mutationKeyOauthCreateDeviceAuthorization(),
-        mutationFn: function oauthCreateDeviceAuthorizationMutationFn({ request, options, }) {
-            const mergedOptions = {
-                ...hookOptions,
-                ...options,
-                fetchOptions: {
-                    ...hookOptions?.fetchOptions,
-                    ...options?.fetchOptions,
-                    signal: combineSignals(hookOptions?.fetchOptions?.signal, options?.fetchOptions?.signal),
-                },
-            };
-            return unwrapAsync(oauthCreateDeviceAuthorization(client$, request, mergedOptions));
-        },
-    };
-}
-//# sourceMappingURL=oauthCreateDeviceAuthorization.js.map

package/dist/esm/react-query/oauthCreateDeviceAuthorization.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauthCreateDeviceAuthorization.js","sourceRoot":"","sources":["../../../src/react-query/oauthCreateDeviceAuthorization.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAEL,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AActD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAsBxD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,yCAAyC,CACvD,OAIC;IAMD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,WAAW,CAAC;QACjB,GAAG,2CAA2C,CAAC,MAAM,EAAE,OAAO,CAAC;QAC/D,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yCAAyC;IACvD,OAAO;QACL,+BAA+B;QAC/B,OAAO;QACP,2BAA2B;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2CAA2C,CACzD,OAA0B,EAC1B,WAA4B;IAO5B,OAAO;QACL,WAAW,EAAE,yCAAyC,EAAE;QACxD,UAAU,EAAE,SAAS,wCAAwC,CAAC,EAC5D,OAAO,EACP,OAAO,GACR;YACC,MAAM,aAAa,GAAG;gBACpB,GAAG,WAAW;gBACd,GAAG,OAAO;gBACV,YAAY,EAAE;oBACZ,GAAG,WAAW,EAAE,YAAY;oBAC5B,GAAG,OAAO,EAAE,YAAY;oBACxB,MAAM,EAAE,cAAc,CACpB,WAAW,EAAE,YAAY,EAAE,MAAM,EACjC,OAAO,EAAE,YAAY,EAAE,MAAM,CAC9B;iBACF;aACF,CAAC;YACF,OAAO,WAAW,CAAC,8BAA8B,CAC/C,OAAO,EACP,OAAO,EACP,aAAa,CACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/react-query/oauthCreateToken.d.ts

@@ -1,76 +0,0 @@
-import { MutationKey, UseMutationResult } from "@tanstack/react-query";
-import { GreenSecurityCore } from "../core.js";
-import { RequestOptions } from "../lib/sdks.js";
-import * as components from "../models/components/index.js";
-import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
-import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
-import * as errors from "../models/errors/index.js";
-import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
-import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
-import { MutationHookOptions } from "./_types.js";
-export type OauthCreateTokenMutationVariables = {
-    request: components.OAuthTokenRequest;
-    options?: RequestOptions;
-};
-export type OauthCreateTokenMutationData = components.TokenResponse;
-export type OauthCreateTokenMutationError = errors.OAuthError | GreenSecurityError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
-/**
- * Issue an access, app or developer token
- *
- * @remarks
- * The OAuth 2.0 token endpoint. It issues four kinds of short-lived token, chosen by
- * `grant_type`:
- *
- * | Grant | Authenticate with | Issues |
- * | --- | --- | --- |
- * | `urn:ietf:params:oauth:grant-type:token-exchange` | The user's session token, as `subject_token` | An app user token (`gsu_`) or an app installation token (`gsi_`), 15 minutes |
- * | `client_credentials` with `activation_id` | The app service account's `client_id` and `client_secret`, or its permanent token as `Authorization: Bearer` | An app installation token (`gsi_`), 15 minutes |
- * | `client_credentials` without `activation_id` | An API service account's `client_id` and `client_secret`, or its permanent token as `Authorization: Bearer` | A plain API access token, 15 minutes |
- * | `refresh_token` (service account) | The service account's `client_id` and `client_secret`, and a `refresh_token` | A plain API access token, 15 minutes, and a new refresh token |
- * | `refresh_token` (apps CLI) | A `gsdr_` refresh token and `client_id=greensecurity-apps-cli`, no secret | A new developer CLI token (`gsd_`), 15 minutes, and a new `gsdr_` refresh token |
- * | `urn:ietf:params:oauth:grant-type:device_code` | The `device_code` from `POST /oauth/device_authorization` | A developer CLI token (`gsd_`), 15 minutes, and a `gsdr_` refresh token |
- *
- * Token exchange is what the Green Security app does when it opens an app's views: the user
- * must be covered by an activation of the app named in `audience`. `client_credentials` with
- * `activation_id` is for the app's own backend. Without `activation_id`, `client_credentials`
- * and a service account's `refresh_token` are the API service account flows: the response is
- * a plain access token with no `issued_token_type` and no `activation_id` (see
- * `TokenResponse`). An app token can never be used to obtain another token.
- *
- * The apps CLI logs in with the device grant and then renews its 15-minute developer token
- * with the public-client `refresh_token` grant. Refresh tokens rotate and are single-use;
- * presenting a spent one revokes the whole login, except for a retry within 30 seconds whose
- * replacement is still unused. A login lasts at most 90 days from its device authorization.
- * See `OAuthCliRefreshTokenGrant`.
- *
- * Every grant takes an optional `scope`, which can only narrow the token: it gets what was
- * requested intersected with what the client is allowed, and if that is empty the request
- * fails with `invalid_scope`. A refreshed token is never wider than the one it replaces.
- *
- * The request body may be JSON or `application/x-www-form-urlencoded`, and every parameter
- * must be in the body: one sent in the query string is refused with `invalid_request`. Errors
- * follow RFC 6749 and use `OAuthError` rather than the usual error envelope, including a
- * body that fails validation (`400` `invalid_request`, never `422`). For the device grant,
- * `authorization_pending` and `slow_down` mean "poll again later", not failure.
- *
- * Only `client_credentials` reads `Authorization`, and only when the body carries neither
- * `client_id` nor `client_secret`. It accepts only the service account's permanent token
- * there: a short-lived token (including one this endpoint issued), a narrowed token or an app
- * token (`gsu_`, `gsi_`, `gsd_`) is answered `401` `invalid_client`, so a token can never be
- * renewed or widened by presenting it. The other grants ignore the header.
- *
- * A narrowed `subject_token` is refused with `invalid_grant`, and a locked service account
- * gets `401` `invalid_client` on `client_credentials` and `refresh_token`.
- *
- * Every response, errors included, carries `Cache-Control: no-store` and `Pragma: no-cache`
- * (RFC 6749 section 5.1), so no cache keeps a token or code.
- *
- * **Permissions.** No named permission.
- */
-export declare function useOauthCreateTokenMutation(options?: MutationHookOptions<OauthCreateTokenMutationData, OauthCreateTokenMutationError, OauthCreateTokenMutationVariables>): UseMutationResult<OauthCreateTokenMutationData, OauthCreateTokenMutationError, OauthCreateTokenMutationVariables>;
-export declare function mutationKeyOauthCreateToken(): MutationKey;
-export declare function buildOauthCreateTokenMutation(client$: GreenSecurityCore, hookOptions?: RequestOptions): {
-    mutationKey: MutationKey;
-    mutationFn: (variables: OauthCreateTokenMutationVariables) => Promise<OauthCreateTokenMutationData>;
-};
-//# sourceMappingURL=oauthCreateToken.d.ts.map

package/dist/esm/react-query/oauthCreateToken.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauthCreateToken.d.ts","sourceRoot":"","sources":["../../../src/react-query/oauthCreateToken.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,OAAO,EAAE,UAAU,CAAC,iBAAiB,CAAC;IACtC,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,UAAU,CAAC,aAAa,CAAC;AAEpE,MAAM,MAAM,6BAA6B,GACrC,MAAM,CAAC,UAAU,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,CAAC,EAAE,mBAAmB,CAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,iCAAiC,CAClC,GACA,iBAAiB,CAClB,4BAA4B,EAC5B,6BAA6B,EAC7B,iCAAiC,CAClC,CAMA;AAED,wBAAgB,2BAA2B,IAAI,WAAW,CAEzD;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,cAAc,GAC3B;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,CACV,SAAS,EAAE,iCAAiC,KACzC,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC5C,CA0BA"}

package/dist/esm/react-query/oauthCreateToken.js

@@ -1,89 +0,0 @@
-/*
- * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
- */
-import { useMutation, } from "@tanstack/react-query";
-import { oauthCreateToken } from "../funcs/oauthCreateToken.js";
-import { combineSignals } from "../lib/primitives.js";
-import { unwrapAsync } from "../types/fp.js";
-import { useGreenSecurityContext } from "./_context.js";
-/**
- * Issue an access, app or developer token
- *
- * @remarks
- * The OAuth 2.0 token endpoint. It issues four kinds of short-lived token, chosen by
- * `grant_type`:
- *
- * | Grant | Authenticate with | Issues |
- * | --- | --- | --- |
- * | `urn:ietf:params:oauth:grant-type:token-exchange` | The user's session token, as `subject_token` | An app user token (`gsu_`) or an app installation token (`gsi_`), 15 minutes |
- * | `client_credentials` with `activation_id` | The app service account's `client_id` and `client_secret`, or its permanent token as `Authorization: Bearer` | An app installation token (`gsi_`), 15 minutes |
- * | `client_credentials` without `activation_id` | An API service account's `client_id` and `client_secret`, or its permanent token as `Authorization: Bearer` | A plain API access token, 15 minutes |
- * | `refresh_token` (service account) | The service account's `client_id` and `client_secret`, and a `refresh_token` | A plain API access token, 15 minutes, and a new refresh token |
- * | `refresh_token` (apps CLI) | A `gsdr_` refresh token and `client_id=greensecurity-apps-cli`, no secret | A new developer CLI token (`gsd_`), 15 minutes, and a new `gsdr_` refresh token |
- * | `urn:ietf:params:oauth:grant-type:device_code` | The `device_code` from `POST /oauth/device_authorization` | A developer CLI token (`gsd_`), 15 minutes, and a `gsdr_` refresh token |
- *
- * Token exchange is what the Green Security app does when it opens an app's views: the user
- * must be covered by an activation of the app named in `audience`. `client_credentials` with
- * `activation_id` is for the app's own backend. Without `activation_id`, `client_credentials`
- * and a service account's `refresh_token` are the API service account flows: the response is
- * a plain access token with no `issued_token_type` and no `activation_id` (see
- * `TokenResponse`). An app token can never be used to obtain another token.
- *
- * The apps CLI logs in with the device grant and then renews its 15-minute developer token
- * with the public-client `refresh_token` grant. Refresh tokens rotate and are single-use;
- * presenting a spent one revokes the whole login, except for a retry within 30 seconds whose
- * replacement is still unused. A login lasts at most 90 days from its device authorization.
- * See `OAuthCliRefreshTokenGrant`.
- *
- * Every grant takes an optional `scope`, which can only narrow the token: it gets what was
- * requested intersected with what the client is allowed, and if that is empty the request
- * fails with `invalid_scope`. A refreshed token is never wider than the one it replaces.
- *
- * The request body may be JSON or `application/x-www-form-urlencoded`, and every parameter
- * must be in the body: one sent in the query string is refused with `invalid_request`. Errors
- * follow RFC 6749 and use `OAuthError` rather than the usual error envelope, including a
- * body that fails validation (`400` `invalid_request`, never `422`). For the device grant,
- * `authorization_pending` and `slow_down` mean "poll again later", not failure.
- *
- * Only `client_credentials` reads `Authorization`, and only when the body carries neither
- * `client_id` nor `client_secret`. It accepts only the service account's permanent token
- * there: a short-lived token (including one this endpoint issued), a narrowed token or an app
- * token (`gsu_`, `gsi_`, `gsd_`) is answered `401` `invalid_client`, so a token can never be
- * renewed or widened by presenting it. The other grants ignore the header.
- *
- * A narrowed `subject_token` is refused with `invalid_grant`, and a locked service account
- * gets `401` `invalid_client` on `client_credentials` and `refresh_token`.
- *
- * Every response, errors included, carries `Cache-Control: no-store` and `Pragma: no-cache`
- * (RFC 6749 section 5.1), so no cache keeps a token or code.
- *
- * **Permissions.** No named permission.
- */
-export function useOauthCreateTokenMutation(options) {
-    const client = useGreenSecurityContext();
-    return useMutation({
-        ...buildOauthCreateTokenMutation(client, options),
-        ...options,
-    });
-}
-export function mutationKeyOauthCreateToken() {
-    return ["@greensecurity/javascript-sdk", "oauth", "createToken"];
-}
-export function buildOauthCreateTokenMutation(client$, hookOptions) {
-    return {
-        mutationKey: mutationKeyOauthCreateToken(),
-        mutationFn: function oauthCreateTokenMutationFn({ request, options, }) {
-            const mergedOptions = {
-                ...hookOptions,
-                ...options,
-                fetchOptions: {
-                    ...hookOptions?.fetchOptions,
-                    ...options?.fetchOptions,
-                    signal: combineSignals(hookOptions?.fetchOptions?.signal, options?.fetchOptions?.signal),
-                },
-            };
-            return unwrapAsync(oauthCreateToken(client$, request, mergedOptions));
-        },
-    };
-}
-//# sourceMappingURL=oauthCreateToken.js.map

package/dist/esm/react-query/oauthCreateToken.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauthCreateToken.js","sourceRoot":"","sources":["../../../src/react-query/oauthCreateToken.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAEL,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AActD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAqBxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAIC;IAMD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,WAAW,CAAC;QACjB,GAAG,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC;QACjD,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,+BAA+B,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAA0B,EAC1B,WAA4B;IAO5B,OAAO;QACL,WAAW,EAAE,2BAA2B,EAAE;QAC1C,UAAU,EAAE,SAAS,0BAA0B,CAAC,EAC9C,OAAO,EACP,OAAO,GACR;YACC,MAAM,aAAa,GAAG;gBACpB,GAAG,WAAW;gBACd,GAAG,OAAO;gBACV,YAAY,EAAE;oBACZ,GAAG,WAAW,EAAE,YAAY;oBAC5B,GAAG,OAAO,EAAE,YAAY;oBACxB,MAAM,EAAE,cAAc,CACpB,WAAW,EAAE,YAAY,EAAE,MAAM,EACjC,OAAO,EAAE,YAAY,EAAE,MAAM,CAC9B;iBACF;aACF,CAAC;YACF,OAAO,WAAW,CAAC,gBAAgB,CACjC,OAAO,EACP,OAAO,EACP,aAAa,CACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/react-query/oauthIntrospectToken.d.ts

@@ -1,54 +0,0 @@
-import { MutationKey, UseMutationResult } from "@tanstack/react-query";
-import { GreenSecurityCore } from "../core.js";
-import { RequestOptions } from "../lib/sdks.js";
-import * as components from "../models/components/index.js";
-import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
-import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
-import * as errors from "../models/errors/index.js";
-import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
-import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
-import { MutationHookOptions } from "./_types.js";
-export type OauthIntrospectTokenMutationVariables = {
-    request: components.TokenIntrospectionRequest;
-    options?: RequestOptions;
-};
-export type OauthIntrospectTokenMutationData = components.TokenIntrospection;
-export type OauthIntrospectTokenMutationError = errors.OAuthError | GreenSecurityError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
-/**
- * Check an app token
- *
- * @remarks
- * RFC 7662 token introspection, for your app's backend. When your app's UI calls your own
- * API it sends the app user token it was given; call this endpoint to confirm the token is
- * live and find out which user, app and activation it belongs to before you act on it.
- *
- * A back-end-only app (a manifest with no `ui_extensions`) has no UI, so no user token
- * ever reaches it, and the installation tokens it uses it mints itself with
- * `client_credentials`. It needs this endpoint only to check an app token that another
- * party sends it.
- *
- * Only app user and app installation tokens issued to your own app are reported as
- * `active`. Any other token, whether unknown, expired, revoked, another app's, a developer
- * CLI token, or one whose user has since been locked, returns `{"active": false}` with a
- * `200`, never an error.
- *
- * The request body may be JSON or `application/x-www-form-urlencoded`.
- *
- * Every response, errors included, carries `Cache-Control: no-store` and `Pragma: no-cache`
- * (RFC 6749 section 5.1), so no cache keeps a token or code.
- *
- * **Permissions.** Only your app service account's permanent token is accepted, as
- * `Authorization: Bearer`. A short-lived or narrowed token (including one from
- * `client_credentials`), a locked service account's token, or a token of a user who is not
- * an API service account is refused with `401` `invalid_client`. Every app token is refused
- * the same way, and that includes installation tokens (`gsi_`): the host also hands those to
- * your app's sandboxed UI, so accepting them here would let code running in the UI introspect
- * tokens. Keep the service account token on your backend.
- */
-export declare function useOauthIntrospectTokenMutation(options?: MutationHookOptions<OauthIntrospectTokenMutationData, OauthIntrospectTokenMutationError, OauthIntrospectTokenMutationVariables>): UseMutationResult<OauthIntrospectTokenMutationData, OauthIntrospectTokenMutationError, OauthIntrospectTokenMutationVariables>;
-export declare function mutationKeyOauthIntrospectToken(): MutationKey;
-export declare function buildOauthIntrospectTokenMutation(client$: GreenSecurityCore, hookOptions?: RequestOptions): {
-    mutationKey: MutationKey;
-    mutationFn: (variables: OauthIntrospectTokenMutationVariables) => Promise<OauthIntrospectTokenMutationData>;
-};
-//# sourceMappingURL=oauthIntrospectToken.d.ts.map

package/dist/esm/react-query/oauthIntrospectToken.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauthIntrospectToken.d.ts","sourceRoot":"","sources":["../../../src/react-query/oauthIntrospectToken.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,qCAAqC,GAAG;IAClD,OAAO,EAAE,UAAU,CAAC,yBAAyB,CAAC;IAC9C,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG,UAAU,CAAC,kBAAkB,CAAC;AAE7E,MAAM,MAAM,iCAAiC,GACzC,MAAM,CAAC,UAAU,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,CAAC,EAAE,mBAAmB,CAC3B,gCAAgC,EAChC,iCAAiC,EACjC,qCAAqC,CACtC,GACA,iBAAiB,CAClB,gCAAgC,EAChC,iCAAiC,EACjC,qCAAqC,CACtC,CAMA;AAED,wBAAgB,+BAA+B,IAAI,WAAW,CAE7D;AAED,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,cAAc,GAC3B;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,CACV,SAAS,EAAE,qCAAqC,KAC7C,OAAO,CAAC,gCAAgC,CAAC,CAAC;CAChD,CA0BA"}

package/dist/esm/react-query/oauthIntrospectToken.js

@@ -1,67 +0,0 @@
-/*
- * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
- */
-import { useMutation, } from "@tanstack/react-query";
-import { oauthIntrospectToken } from "../funcs/oauthIntrospectToken.js";
-import { combineSignals } from "../lib/primitives.js";
-import { unwrapAsync } from "../types/fp.js";
-import { useGreenSecurityContext } from "./_context.js";
-/**
- * Check an app token
- *
- * @remarks
- * RFC 7662 token introspection, for your app's backend. When your app's UI calls your own
- * API it sends the app user token it was given; call this endpoint to confirm the token is
- * live and find out which user, app and activation it belongs to before you act on it.
- *
- * A back-end-only app (a manifest with no `ui_extensions`) has no UI, so no user token
- * ever reaches it, and the installation tokens it uses it mints itself with
- * `client_credentials`. It needs this endpoint only to check an app token that another
- * party sends it.
- *
- * Only app user and app installation tokens issued to your own app are reported as
- * `active`. Any other token, whether unknown, expired, revoked, another app's, a developer
- * CLI token, or one whose user has since been locked, returns `{"active": false}` with a
- * `200`, never an error.
- *
- * The request body may be JSON or `application/x-www-form-urlencoded`.
- *
- * Every response, errors included, carries `Cache-Control: no-store` and `Pragma: no-cache`
- * (RFC 6749 section 5.1), so no cache keeps a token or code.
- *
- * **Permissions.** Only your app service account's permanent token is accepted, as
- * `Authorization: Bearer`. A short-lived or narrowed token (including one from
- * `client_credentials`), a locked service account's token, or a token of a user who is not
- * an API service account is refused with `401` `invalid_client`. Every app token is refused
- * the same way, and that includes installation tokens (`gsi_`): the host also hands those to
- * your app's sandboxed UI, so accepting them here would let code running in the UI introspect
- * tokens. Keep the service account token on your backend.
- */
-export function useOauthIntrospectTokenMutation(options) {
-    const client = useGreenSecurityContext();
-    return useMutation({
-        ...buildOauthIntrospectTokenMutation(client, options),
-        ...options,
-    });
-}
-export function mutationKeyOauthIntrospectToken() {
-    return ["@greensecurity/javascript-sdk", "oauth", "introspectToken"];
-}
-export function buildOauthIntrospectTokenMutation(client$, hookOptions) {
-    return {
-        mutationKey: mutationKeyOauthIntrospectToken(),
-        mutationFn: function oauthIntrospectTokenMutationFn({ request, options, }) {
-            const mergedOptions = {
-                ...hookOptions,
-                ...options,
-                fetchOptions: {
-                    ...hookOptions?.fetchOptions,
-                    ...options?.fetchOptions,
-                    signal: combineSignals(hookOptions?.fetchOptions?.signal, options?.fetchOptions?.signal),
-                },
-            };
-            return unwrapAsync(oauthIntrospectToken(client$, request, mergedOptions));
-        },
-    };
-}
-//# sourceMappingURL=oauthIntrospectToken.js.map

package/dist/esm/react-query/oauthIntrospectToken.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauthIntrospectToken.js","sourceRoot":"","sources":["../../../src/react-query/oauthIntrospectToken.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAEL,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AActD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAqBxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAIC;IAMD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,WAAW,CAAC;QACjB,GAAG,iCAAiC,CAAC,MAAM,EAAE,OAAO,CAAC;QACrD,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO,CAAC,+BAA+B,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAA0B,EAC1B,WAA4B;IAO5B,OAAO;QACL,WAAW,EAAE,+BAA+B,EAAE;QAC9C,UAAU,EAAE,SAAS,8BAA8B,CAAC,EAClD,OAAO,EACP,OAAO,GACR;YACC,MAAM,aAAa,GAAG;gBACpB,GAAG,WAAW;gBACd,GAAG,OAAO;gBACV,YAAY,EAAE;oBACZ,GAAG,WAAW,EAAE,YAAY;oBAC5B,GAAG,OAAO,EAAE,YAAY;oBACxB,MAAM,EAAE,cAAc,CACpB,WAAW,EAAE,YAAY,EAAE,MAAM,EACjC,OAAO,EAAE,YAAY,EAAE,MAAM,CAC9B;iBACF;aACF,CAAC;YACF,OAAO,WAAW,CAAC,oBAAoB,CACrC,OAAO,EACP,OAAO,EACP,aAAa,CACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}