@idp.global/interfaces 1.0.1

package/dist_ts/data/oidc.d.ts

@@ -0,0 +1,248 @@
+/**
+ * OIDC (OpenID Connect) data interfaces for third-party client support
+ */
+/**
+ * Supported OIDC scopes
+ */
+export type TOidcScope = 'openid' | 'profile' | 'email' | 'organizations' | 'roles';
+/**
+ * Authorization code for OAuth 2.0 authorization code flow
+ */
+export interface IAuthorizationCode {
+    id: string;
+    data: {
+        /** Hashed authorization code string */
+        codeHash: string;
+        /** OAuth client ID */
+        clientId: string;
+        /** User ID who authorized */
+        userId: string;
+        /** Scopes granted */
+        scopes: TOidcScope[];
+        /** Redirect URI used in authorization request */
+        redirectUri: string;
+        /** PKCE code challenge (S256 hashed) */
+        codeChallenge?: string;
+        /** PKCE code challenge method */
+        codeChallengeMethod?: 'S256';
+        /** Nonce from authorization request (for ID token) */
+        nonce?: string;
+        /** Expiration timestamp (10 minutes from creation) */
+        expiresAt: number;
+        /** Creation timestamp */
+        issuedAt: number;
+        /** Whether the code has been used (single-use) */
+        used: boolean;
+    };
+}
+/**
+ * OIDC Access Token (opaque or JWT)
+ */
+export interface IOidcAccessToken {
+    id: string;
+    data: {
+        /** The access token string hash for storage */
+        tokenHash: string;
+        /** OAuth client ID */
+        clientId: string;
+        /** User ID */
+        userId: string;
+        /** Granted scopes */
+        scopes: TOidcScope[];
+        /** Expiration timestamp */
+        expiresAt: number;
+        /** Creation timestamp */
+        issuedAt: number;
+    };
+}
+/**
+ * OIDC Refresh Token
+ */
+export interface IOidcRefreshToken {
+    id: string;
+    data: {
+        /** The refresh token string hash for storage */
+        tokenHash: string;
+        /** OAuth client ID */
+        clientId: string;
+        /** User ID */
+        userId: string;
+        /** Granted scopes */
+        scopes: TOidcScope[];
+        /** Expiration timestamp */
+        expiresAt: number;
+        /** Creation timestamp */
+        issuedAt: number;
+        /** Whether the token has been revoked */
+        revoked: boolean;
+    };
+}
+/**
+ * User consent record for an OAuth client
+ */
+export interface IUserConsent {
+    id: string;
+    data: {
+        /** User who gave consent */
+        userId: string;
+        /** OAuth client ID */
+        clientId: string;
+        /** Scopes the user consented to */
+        scopes: TOidcScope[];
+        /** When consent was granted */
+        grantedAt: number;
+        /** When consent was last updated */
+        updatedAt: number;
+    };
+}
+/**
+ * OIDC Discovery Document (OpenID Provider Configuration)
+ */
+export interface IOidcDiscoveryDocument {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    userinfo_endpoint: string;
+    jwks_uri: string;
+    revocation_endpoint: string;
+    scopes_supported: TOidcScope[];
+    response_types_supported: string[];
+    grant_types_supported: string[];
+    subject_types_supported: string[];
+    id_token_signing_alg_values_supported: string[];
+    token_endpoint_auth_methods_supported: string[];
+    code_challenge_methods_supported: string[];
+    claims_supported: string[];
+}
+/**
+ * JSON Web Key Set (JWKS) response
+ */
+export interface IJwks {
+    keys: IJwk[];
+}
+/**
+ * JSON Web Key (RSA public key)
+ */
+export interface IJwk {
+    kty: 'RSA';
+    use: 'sig';
+    alg: 'RS256';
+    kid: string;
+    n: string;
+    e: string;
+}
+/**
+ * ID Token claims (JWT payload)
+ */
+export interface IIdTokenClaims {
+    /** Issuer (idp.global URL) */
+    iss: string;
+    /** Subject (user ID) */
+    sub: string;
+    /** Audience (client ID) */
+    aud: string;
+    /** Expiration time (Unix timestamp) */
+    exp: number;
+    /** Issued at (Unix timestamp) */
+    iat: number;
+    /** Authentication time (Unix timestamp) */
+    auth_time?: number;
+    /** Nonce (if provided in authorization request) */
+    nonce?: string;
+    /** Access token hash (for hybrid flows) */
+    at_hash?: string;
+    name?: string;
+    preferred_username?: string;
+    picture?: string;
+    email?: string;
+    email_verified?: boolean;
+    organizations?: IOrganizationClaim[];
+    roles?: string[];
+    app_roles?: string[];
+    app_permissions?: string[];
+    app_scopes?: string[];
+}
+/**
+ * Organization claim in ID token / userinfo
+ */
+export interface IOrganizationClaim {
+    id: string;
+    name: string;
+    slug: string;
+    roles: string[];
+}
+/**
+ * UserInfo endpoint response
+ */
+export interface IUserInfoResponse {
+    /** Subject (user ID) - always included */
+    sub: string;
+    name?: string;
+    preferred_username?: string;
+    picture?: string;
+    email?: string;
+    email_verified?: boolean;
+    organizations?: IOrganizationClaim[];
+    roles?: string[];
+    app_roles?: string[];
+    app_permissions?: string[];
+    app_scopes?: string[];
+}
+/**
+ * Token endpoint response
+ */
+export interface ITokenResponse {
+    access_token: string;
+    token_type: 'Bearer';
+    expires_in: number;
+    refresh_token?: string;
+    id_token?: string;
+    scope: string;
+}
+/**
+ * Token endpoint error response
+ */
+export interface ITokenErrorResponse {
+    error: 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'unauthorized_client' | 'unsupported_grant_type' | 'invalid_scope';
+    error_description?: string;
+    error_uri?: string;
+}
+/**
+ * Authorization request parameters
+ */
+export interface IAuthorizationRequest {
+    client_id: string;
+    redirect_uri: string;
+    response_type: 'code';
+    scope: string;
+    state: string;
+    code_challenge?: string;
+    code_challenge_method?: 'S256';
+    nonce?: string;
+    prompt?: 'none' | 'login' | 'consent';
+}
+/**
+ * Token request for authorization_code grant
+ */
+export interface ITokenRequestAuthCode {
+    grant_type: 'authorization_code';
+    code: string;
+    redirect_uri: string;
+    client_id: string;
+    client_secret?: string;
+    code_verifier?: string;
+}
+/**
+ * Token request for refresh_token grant
+ */
+export interface ITokenRequestRefresh {
+    grant_type: 'refresh_token';
+    refresh_token: string;
+    client_id: string;
+    client_secret?: string;
+    scope?: string;
+}
+/**
+ * Union type for token requests
+ */
+export type ITokenRequest = ITokenRequestAuthCode | ITokenRequestRefresh;

package/dist_ts/data/oidc.js

@@ -0,0 +1,5 @@
+/**
+ * OIDC (OpenID Connect) data interfaces for third-party client support
+ */
+export {};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoib2lkYy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3RzL2RhdGEvb2lkYy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQTs7R0FFRyJ9

package/dist_ts/data/organization.d.ts

@@ -0,0 +1,11 @@
+import { type IOrgRoleDefinition } from './role.js';
+export interface IOrganization {
+    id: string;
+    data: {
+        name: string;
+        slug: string;
+        billingPlanId: string;
+        roleIds: string[];
+        roleDefinitions?: IOrgRoleDefinition[];
+    };
+}

package/dist_ts/data/organization.js

@@ -0,0 +1,4 @@
+import * as plugins from '../plugins.js';
+import {} from './billingplan.js';
+import {} from './role.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoib3JnYW5pemF0aW9uLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vdHMvZGF0YS9vcmdhbml6YXRpb24udHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxlQUFlLENBQUM7QUFDekMsT0FBTyxFQUFxQixNQUFNLGtCQUFrQixDQUFDO0FBQ3JELE9BQU8sRUFBdUMsTUFBTSxXQUFXLENBQUMifQ==

package/dist_ts/data/paddlecheckoutdata.d.ts

@@ -0,0 +1,316 @@
+export interface IPaddleCheckoutData<TPassthrough = null> {
+    checkout: {
+        created_at: string;
+        completed: boolean;
+        id: string;
+        coupon: {
+            coupon_code?: string;
+        };
+        passthrough?: TPassthrough;
+        prices: {
+            customer: {
+                currency: string;
+                unit: string;
+                unit_tax: string;
+                total: string;
+                total_tax: string;
+                items: Array<{
+                    checkout_product_id: number;
+                    product_id: number;
+                    name: string;
+                    custom_message: string;
+                    quantity: number;
+                    allow_quantity: false;
+                    icon_url: string;
+                    min_quantity: number;
+                    max_quantity: number;
+                    currency: string;
+                    unit_price: {
+                        net: number;
+                        gross: number;
+                        net_discount: number;
+                        gross_discount: number;
+                        net_after_discount: number;
+                        gross_after_discount: number;
+                        tax: number;
+                        tax_after_discount: number;
+                    };
+                    line_price: {
+                        net: number;
+                        gross: number;
+                        net_discount: number;
+                        gross_discount: number;
+                        net_after_discount: number;
+                        gross_after_discount: number;
+                        tax: number;
+                        tax_after_discount: number;
+                    };
+                    discounts: [];
+                    /**
+                     * factorised, not percentage, so looks like 0.19 for Germany.
+                     */
+                    tax_rate: number;
+                    recurring: {
+                        period: string;
+                        interval: number;
+                        trial_days: number;
+                        currency: string;
+                        unit_price: {
+                            net: number;
+                            gross: number;
+                            net_discount: number;
+                            gross_discount: number;
+                            net_after_discount: number;
+                            gross_after_discount: number;
+                            tax: number;
+                            tax_after_discount: number;
+                        };
+                        line_price: {
+                            net: number;
+                            gross: number;
+                            net_discount: number;
+                            gross_discount: number;
+                            net_after_discount: number;
+                            gross_after_discount: number;
+                            tax: number;
+                            tax_after_discount: number;
+                        };
+                        discounts: [];
+                        tax_rate: number;
+                    };
+                }>;
+            };
+            vendor: {
+                currency: string;
+                unit: string;
+                unit_tax: string;
+                total: string;
+                total_tax: string;
+                items: [
+                    {
+                        checkout_product_id: number;
+                        product_id: number;
+                        name: string;
+                        custom_message: string;
+                        quantity: number;
+                        allow_quantity: false;
+                        icon_url: string;
+                        min_quantity: number;
+                        max_quantity: number;
+                        currency: string;
+                        unit_price: {
+                            net: number;
+                            gross: number;
+                            net_discount: number;
+                            gross_discount: number;
+                            net_after_discount: number;
+                            gross_after_discount: number;
+                            tax: number;
+                            tax_after_discount: number;
+                        };
+                        line_price: {
+                            net: number;
+                            gross: number;
+                            net_discount: number;
+                            gross_discount: number;
+                            net_after_discount: number;
+                            gross_after_discount: number;
+                            tax: number;
+                            tax_after_discount: number;
+                        };
+                        discounts: [];
+                        tax_rate: number;
+                        recurring: {
+                            period: string;
+                            interval: number;
+                            trial_days: number;
+                            currency: string;
+                            unit_price: {
+                                net: number;
+                                gross: number;
+                                net_discount: number;
+                                gross_discount: number;
+                                net_after_discount: number;
+                                gross_after_discount: number;
+                                tax: number;
+                                tax_after_discount: number;
+                            };
+                            line_price: {
+                                net: number;
+                                gross: number;
+                                net_discount: number;
+                                gross_discount: number;
+                                net_after_discount: number;
+                                gross_after_discount: number;
+                                tax: number;
+                                tax_after_discount: number;
+                            };
+                            discounts: [];
+                            tax_rate: number;
+                        };
+                    }
+                ];
+            };
+        };
+        redirect_url: null;
+        test_variant: 'newCheckout';
+        recurring_prices: {
+            customer: {
+                currency: string;
+                unit: string;
+                unit_tax: string;
+                total: string;
+                total_tax: string;
+                items: [
+                    {
+                        checkout_product_id: number;
+                        product_id: number;
+                        name: string;
+                        custom_message: string;
+                        quantity: number;
+                        allow_quantity: false;
+                        icon_url: string;
+                        min_quantity: number;
+                        max_quantity: number;
+                        currency: string;
+                        unit_price: {
+                            net: number;
+                            gross: number;
+                            net_discount: number;
+                            gross_discount: number;
+                            net_after_discount: number;
+                            gross_after_discount: number;
+                            tax: number;
+                            tax_after_discount: number;
+                        };
+                        line_price: {
+                            net: number;
+                            gross: number;
+                            net_discount: number;
+                            gross_discount: number;
+                            net_after_discount: number;
+                            gross_after_discount: number;
+                            tax: number;
+                            tax_after_discount: number;
+                        };
+                        discounts: [];
+                        tax_rate: number;
+                        recurring: {
+                            period: string;
+                            interval: number;
+                            trial_days: number;
+                            currency: string;
+                            unit_price: {
+                                net: number;
+                                gross: number;
+                                net_discount: number;
+                                gross_discount: number;
+                                net_after_discount: number;
+                                gross_after_discount: number;
+                                tax: number;
+                                tax_after_discount: number;
+                            };
+                            line_price: {
+                                net: number;
+                                gross: number;
+                                net_discount: number;
+                                gross_discount: number;
+                                net_after_discount: number;
+                                gross_after_discount: number;
+                                tax: number;
+                                tax_after_discount: number;
+                            };
+                            discounts: [];
+                            tax_rate: number;
+                        };
+                    }
+                ];
+            };
+            interval: {
+                length: number;
+                type: string;
+            };
+            vendor: {
+                currency: string;
+                unit: string;
+                unit_tax: string;
+                total: string;
+                total_tax: string;
+                items: [
+                    {
+                        checkout_product_id: number;
+                        product_id: number;
+                        name: string;
+                        custom_message: string;
+                        quantity: number;
+                        allow_quantity: false;
+                        icon_url: string;
+                        min_quantity: number;
+                        max_quantity: number;
+                        currency: string;
+                        unit_price: {
+                            net: number;
+                            gross: number;
+                            net_discount: number;
+                            gross_discount: number;
+                            net_after_discount: number;
+                            gross_after_discount: number;
+                            tax: number;
+                            tax_after_discount: number;
+                        };
+                        line_price: {
+                            net: number;
+                            gross: number;
+                            net_discount: number;
+                            gross_discount: number;
+                            net_after_discount: number;
+                            gross_after_discount: number;
+                            tax: number;
+                            tax_after_discount: number;
+                        };
+                        discounts: [];
+                        tax_rate: number;
+                        recurring: {
+                            period: string;
+                            interval: number;
+                            trial_days: number;
+                            currency: string;
+                            unit_price: {
+                                net: number;
+                                gross: number;
+                                net_discount: number;
+                                gross_discount: number;
+                                net_after_discount: number;
+                                gross_after_discount: number;
+                                tax: number;
+                                tax_after_discount: number;
+                            };
+                            line_price: {
+                                net: number;
+                                gross: number;
+                                net_discount: number;
+                                gross_discount: number;
+                                net_after_discount: number;
+                                gross_after_discount: number;
+                                tax: number;
+                                tax_after_discount: number;
+                            };
+                            discounts: [];
+                            tax_rate: number;
+                        };
+                    }
+                ];
+            };
+        };
+    };
+    product: {
+        quantity: number;
+        id: number;
+        name: string;
+    };
+    user: {
+        id: string;
+        email: string;
+        country: string;
+    };
+}

package/dist_ts/data/paddlecheckoutdata.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGFkZGxlY2hlY2tvdXRkYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vdHMvZGF0YS9wYWRkbGVjaGVja291dGRhdGEudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IiJ9

package/dist_ts/data/passportchallenge.d.ts

@@ -0,0 +1,68 @@
+import type { IPassportCapabilities } from './passportdevice.js';
+export type TPassportChallengeType = 'device_enrollment' | 'authentication' | 'step_up' | 'physical_access';
+export type TPassportChallengeStatus = 'pending' | 'approved' | 'expired' | 'rejected';
+export type TPassportChallengeDeliveryStatus = 'pending' | 'sent' | 'failed' | 'seen';
+export type TPassportSignatureFormat = 'raw' | 'der';
+export interface IPassportLocationEvidence {
+    latitude: number;
+    longitude: number;
+    accuracyMeters: number;
+    capturedAt: number;
+}
+export interface IPassportNfcEvidence {
+    tagId?: string;
+    readerId?: string;
+}
+export interface IPassportLocationPolicy {
+    mode: 'geofence';
+    label?: string;
+    latitude: number;
+    longitude: number;
+    radiusMeters: number;
+    maxAccuracyMeters?: number;
+}
+export interface IPassportChallenge {
+    id: string;
+    data: {
+        userId: string;
+        deviceId?: string | null;
+        type: TPassportChallengeType;
+        status: TPassportChallengeStatus;
+        tokenHash?: string | null;
+        challenge: string;
+        metadata: {
+            originHost?: string;
+            audience?: string;
+            notificationTitle?: string;
+            deviceLabel?: string;
+            requireLocation: boolean;
+            requireNfc: boolean;
+            locationPolicy?: IPassportLocationPolicy;
+            requestedCapabilities?: Partial<IPassportCapabilities>;
+        };
+        evidence?: {
+            signatureFormat?: TPassportSignatureFormat;
+            location?: IPassportLocationEvidence;
+            locationEvaluation?: {
+                matched: boolean;
+                distanceMeters?: number;
+                accuracyAccepted?: boolean;
+                evaluatedAt: number;
+                reason?: string;
+            };
+            nfc?: IPassportNfcEvidence;
+        };
+        notification?: {
+            hintId: string;
+            status: TPassportChallengeDeliveryStatus;
+            attemptCount: number;
+            createdAt: number;
+            deliveredAt?: number | null;
+            seenAt?: number | null;
+            lastError?: string | null;
+        };
+        createdAt: number;
+        expiresAt: number;
+        completedAt?: number | null;
+    };
+}

package/dist_ts/data/passportchallenge.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGFzc3BvcnRjaGFsbGVuZ2UuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90cy9kYXRhL3Bhc3Nwb3J0Y2hhbGxlbmdlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiIifQ==

package/dist_ts/data/passportdevice.d.ts

@@ -0,0 +1,34 @@
+export type TPassportDevicePlatform = 'ios' | 'ipados' | 'macos' | 'watchos' | 'android' | 'web' | 'unknown';
+export type TPassportDeviceStatus = 'active' | 'revoked';
+export type TPassportPushProvider = 'apns';
+export type TPassportPushEnvironment = 'development' | 'production';
+export interface IPassportCapabilities {
+    gps: boolean;
+    nfc: boolean;
+    push: boolean;
+}
+export interface IPassportDevice {
+    id: string;
+    data: {
+        userId: string;
+        label: string;
+        platform: TPassportDevicePlatform;
+        status: TPassportDeviceStatus;
+        publicKeyAlgorithm: 'p256';
+        publicKeyX963Base64: string;
+        capabilities: IPassportCapabilities;
+        pushRegistration?: {
+            provider: TPassportPushProvider;
+            token: string;
+            topic: string;
+            environment: TPassportPushEnvironment;
+            registeredAt: number;
+            lastDeliveredAt?: number;
+            lastError?: string;
+        };
+        appVersion?: string;
+        createdAt: number;
+        lastSeenAt?: number;
+        lastChallengeAt?: number;
+    };
+}