@logto/schemas 1.18.0 → 1.19.0

package/alterations/1.19.0-1720253939-add-organization-branding.ts

@@ -0,0 +1,18 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      alter table organizations add column branding jsonb not null default '{}'::jsonb;
+    `);
+  },
+  down: async (pool) => {
+    await pool.query(sql`
+      alter table organizations drop column branding;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.19.0-1720345784-add-color-to-app-sie.ts

@@ -0,0 +1,18 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      alter table application_sign_in_experiences add column color jsonb not null default '{}'::jsonb;
+    `);
+  },
+  down: async (pool) => {
+    await pool.query(sql`
+      alter table application_sign_in_experiences drop column color;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.19.0-1720505152-update-custom-ui-assets.ts

@@ -0,0 +1,20 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      alter table sign_in_experiences drop column custom_ui_asset_id;
+      alter table sign_in_experiences add column custom_ui_assets jsonb;
+    `);
+  },
+  down: async (pool) => {
+    await pool.query(sql`
+      alter table sign_in_experiences add column custom_ui_asset_id varchar(21);
+      alter table sign_in_experiences drop column custom_ui_assets;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.19.0-1721483240-multiple-app-secrets.ts

@@ -0,0 +1,77 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      -- Remove existing constraint
+      alter table organization_application_relations drop constraint application_type;
+
+      -- Drop the function
+      drop function check_application_type;
+
+      -- Create a new function that accepts a variadic array of application types
+      create function check_application_type(
+        application_id varchar(21),
+        variadic target_type application_type[]
+      ) returns boolean as
+      $$ begin
+        return (select type from applications where id = application_id) = any(target_type);
+      end; $$ language plpgsql set search_path = public;
+
+      -- Add back the constraint
+      alter table organization_application_relations
+        add constraint application_type
+        check (check_application_type(application_id, 'MachineToMachine'));
+
+      -- Create the new table
+      create table application_secrets (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        application_id varchar(21) not null
+          references applications (id) on update cascade on delete cascade,
+        /** The name of the secret. Should be unique within the application. */
+        name varchar(256) not null,
+        value varchar(64) not null,
+        expires_at timestamptz,
+        created_at timestamptz not null default now(),
+        primary key (tenant_id, application_id, name),
+        constraint application_type
+          check (check_application_type(application_id, 'MachineToMachine', 'Traditional', 'Protected'))
+      );
+    `);
+    await applyTableRls(pool, 'application_secrets');
+  },
+  down: async (pool) => {
+    await dropTableRls(pool, 'application_secrets');
+    await pool.query(sql`
+      -- Remove the table
+      drop table application_secrets;
+
+      -- Remove the constraint
+      alter table organization_application_relations drop constraint application_type;
+
+      -- Drop the function
+      drop function check_application_type;
+
+      -- Restore the original function
+      create function check_application_type(
+        application_id varchar(21),
+        target_type application_type
+      ) returns boolean as
+      $$ begin
+        return (select type from applications where id = application_id) = target_type;
+      end; $$ language plpgsql set search_path = public;
+
+      -- Add back the constraint
+      alter table organization_application_relations
+        add constraint application_type
+        check (check_application_type(application_id, 'MachineToMachine'));
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.19.0-1721645392-add-application-custom-data-column.ts

@@ -0,0 +1,18 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      alter table applications add column custom_data jsonb not null default '{}'::jsonb;
+    `);
+  },
+  down: async (pool) => {
+    await pool.query(sql`
+      alter table applications drop column custom_data;
+    `);
+  },
+};
+
+export default alteration;

package/alterations/1.19.0-1722926389-argon2d-argon2id.ts

@@ -0,0 +1,35 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      alter type users_password_encryption_method add value 'Argon2id';
+      alter type users_password_encryption_method add value 'Argon2d';
+    `);
+  },
+  down: async (pool) => {
+    const { rows } = await pool.query(sql`
+      select id from users
+      where password_encryption_method = ${'Argon2id'}
+      or password_encryption_method = ${'Argon2d'}
+    `);
+    if (rows.length > 0) {
+      throw new Error('There are users with password encryption methods Argon2id or Argon2d.');
+    }
+
+    await pool.query(sql`
+      create type users_password_encryption_method_revised as enum ('Argon2i', 'SHA1', 'SHA256', 'MD5', 'Bcrypt');
+
+      alter table users 
+      alter column password_encryption_method type users_password_encryption_method_revised 
+      using password_encryption_method::text::users_password_encryption_method_revised;
+
+      drop type users_password_encryption_method;
+      alter type users_password_encryption_method_revised rename to users_password_encryption_method;
+    `);
+  },
+};
+
+export default alteration;

package/alterations-js/1.19.0-1720253939-add-organization-branding.js

@@ -0,0 +1,14 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table organizations add column branding jsonb not null default '{}'::jsonb;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table organizations drop column branding;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.19.0-1720345784-add-color-to-app-sie.js

@@ -0,0 +1,14 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table application_sign_in_experiences add column color jsonb not null default '{}'::jsonb;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table application_sign_in_experiences drop column color;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.19.0-1720505152-update-custom-ui-assets.js

@@ -0,0 +1,16 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table sign_in_experiences drop column custom_ui_asset_id;
+      alter table sign_in_experiences add column custom_ui_assets jsonb;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table sign_in_experiences add column custom_ui_asset_id varchar(21);
+      alter table sign_in_experiences drop column custom_ui_assets;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.19.0-1721483240-multiple-app-secrets.js

@@ -0,0 +1,72 @@
+import { sql } from '@silverhand/slonik';
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      -- Remove existing constraint
+      alter table organization_application_relations drop constraint application_type;
+
+      -- Drop the function
+      drop function check_application_type;
+
+      -- Create a new function that accepts a variadic array of application types
+      create function check_application_type(
+        application_id varchar(21),
+        variadic target_type application_type[]
+      ) returns boolean as
+      $$ begin
+        return (select type from applications where id = application_id) = any(target_type);
+      end; $$ language plpgsql set search_path = public;
+
+      -- Add back the constraint
+      alter table organization_application_relations
+        add constraint application_type
+        check (check_application_type(application_id, 'MachineToMachine'));
+
+      -- Create the new table
+      create table application_secrets (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        application_id varchar(21) not null
+          references applications (id) on update cascade on delete cascade,
+        /** The name of the secret. Should be unique within the application. */
+        name varchar(256) not null,
+        value varchar(64) not null,
+        expires_at timestamptz,
+        created_at timestamptz not null default now(),
+        primary key (tenant_id, application_id, name),
+        constraint application_type
+          check (check_application_type(application_id, 'MachineToMachine', 'Traditional', 'Protected'))
+      );
+    `);
+        await applyTableRls(pool, 'application_secrets');
+    },
+    down: async (pool) => {
+        await dropTableRls(pool, 'application_secrets');
+        await pool.query(sql `
+      -- Remove the table
+      drop table application_secrets;
+
+      -- Remove the constraint
+      alter table organization_application_relations drop constraint application_type;
+
+      -- Drop the function
+      drop function check_application_type;
+
+      -- Restore the original function
+      create function check_application_type(
+        application_id varchar(21),
+        target_type application_type
+      ) returns boolean as
+      $$ begin
+        return (select type from applications where id = application_id) = target_type;
+      end; $$ language plpgsql set search_path = public;
+
+      -- Add back the constraint
+      alter table organization_application_relations
+        add constraint application_type
+        check (check_application_type(application_id, 'MachineToMachine'));
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.19.0-1721645392-add-application-custom-data-column.js

@@ -0,0 +1,14 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter table applications add column custom_data jsonb not null default '{}'::jsonb;
+    `);
+    },
+    down: async (pool) => {
+        await pool.query(sql `
+      alter table applications drop column custom_data;
+    `);
+    },
+};
+export default alteration;

package/alterations-js/1.19.0-1722926389-argon2d-argon2id.js

@@ -0,0 +1,30 @@
+import { sql } from '@silverhand/slonik';
+const alteration = {
+    up: async (pool) => {
+        await pool.query(sql `
+      alter type users_password_encryption_method add value 'Argon2id';
+      alter type users_password_encryption_method add value 'Argon2d';
+    `);
+    },
+    down: async (pool) => {
+        const { rows } = await pool.query(sql `
+      select id from users
+      where password_encryption_method = ${'Argon2id'}
+      or password_encryption_method = ${'Argon2d'}
+    `);
+        if (rows.length > 0) {
+            throw new Error('There are users with password encryption methods Argon2id or Argon2d.');
+        }
+        await pool.query(sql `
+      create type users_password_encryption_method_revised as enum ('Argon2i', 'SHA1', 'SHA256', 'MD5', 'Bcrypt');
+
+      alter table users 
+      alter column password_encryption_method type users_password_encryption_method_revised 
+      using password_encryption_method::text::users_password_encryption_method_revised;
+
+      drop type users_password_encryption_method;
+      alter type users_password_encryption_method_revised rename to users_password_encryption_method;
+    `);
+    },
+};
+export default alteration;

package/lib/consts/oidc.d.ts

@@ -27,7 +27,12 @@ export declare enum ExtraParamsKey {
      * - `social:<target>` (Use a social connector with the specified target, e.g. `social:google`)
      * - `sso:<connector-id>` (Use the specified SSO connector, e.g. `sso:123456`)
      */
-    DirectSignIn = "direct_sign_in"
+    DirectSignIn = "direct_sign_in",
+    /**
+     * Override the default sign-in experience configuration with the settings from the specified
+     * organization ID.
+     */
+    OrganizationId = "organization_id"
 }
 /** @deprecated Use {@link FirstScreen} instead. */
 export declare enum InteractionMode {
@@ -42,13 +47,21 @@ export declare const extraParamsObjectGuard: z.ZodObject<{
     interaction_mode: z.ZodOptional<z.ZodNativeEnum<typeof InteractionMode>>;
     first_screen: z.ZodOptional<z.ZodNativeEnum<typeof FirstScreen>>;
     direct_sign_in: z.ZodOptional<z.ZodString>;
+    organization_id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     interaction_mode?: InteractionMode | undefined;
     first_screen?: FirstScreen | undefined;
     direct_sign_in?: string | undefined;
+    organization_id?: string | undefined;
 }, {
     interaction_mode?: InteractionMode | undefined;
     first_screen?: FirstScreen | undefined;
     direct_sign_in?: string | undefined;
+    organization_id?: string | undefined;
+}>;
+export type ExtraParamsObject = Partial<{
+    [ExtraParamsKey.InteractionMode]: InteractionMode;
+    [ExtraParamsKey.FirstScreen]: FirstScreen;
+    [ExtraParamsKey.DirectSignIn]: string;
+    [ExtraParamsKey.OrganizationId]: string;
 }>;
-export type ExtraParamsObject = z.infer<typeof extraParamsObjectGuard>;

package/lib/consts/oidc.js

@@ -30,6 +30,11 @@ export var ExtraParamsKey;
      * - `sso:<connector-id>` (Use the specified SSO connector, e.g. `sso:123456`)
      */
     ExtraParamsKey["DirectSignIn"] = "direct_sign_in";
+    /**
+     * Override the default sign-in experience configuration with the settings from the specified
+     * organization ID.
+     */
+    ExtraParamsKey["OrganizationId"] = "organization_id";
 })(ExtraParamsKey || (ExtraParamsKey = {}));
 /** @deprecated Use {@link FirstScreen} instead. */
 export var InteractionMode;
@@ -47,5 +52,6 @@ export const extraParamsObjectGuard = z
     [ExtraParamsKey.InteractionMode]: z.nativeEnum(InteractionMode),
     [ExtraParamsKey.FirstScreen]: z.nativeEnum(FirstScreen),
     [ExtraParamsKey.DirectSignIn]: z.string(),
+    [ExtraParamsKey.OrganizationId]: z.string(),
 })
     .partial();

package/lib/consts/system.d.ts

@@ -9,3 +9,5 @@
  * If we use `/default`, the URL will look ugly; thus we keep the old fashion `/console`.
  */
 export declare const ossConsolePath = "/console";
+/** The prefix for keys and values that need to be explicitly marked as internal. */
+export declare const internalPrefix = "#internal:";

package/lib/consts/system.js

@@ -9,3 +9,5 @@
  * If we use `/default`, the URL will look ugly; thus we keep the old fashion `/console`.
  */
 export const ossConsolePath = '/console';
+/** The prefix for keys and values that need to be explicitly marked as internal. */
+export const internalPrefix = '#internal:';

package/lib/db-entries/application-secret.d.ts

@@ -0,0 +1,28 @@
+import { GeneratedSchema } from './../foundations/index.js';
+/**
+ * Application secrets for the `client_credentials` grant type and other confidential client use cases. Note that these secrets replace the `secret` column in the `applications` table, while the `secret` column is still used for the internal validation as `oidc-provider` does not support multiple secrets per client.
+ *
+ * @remarks This is a type for database creation.
+ * @see {@link ApplicationSecret} for the original type.
+ */
+export type CreateApplicationSecret = {
+    tenantId?: string;
+    applicationId: string;
+    /** The name of the secret. Should be unique within the application. */
+    name: string;
+    value: string;
+    createdAt?: number;
+    expiresAt?: number | null;
+};
+/** Application secrets for the `client_credentials` grant type and other confidential client use cases. Note that these secrets replace the `secret` column in the `applications` table, while the `secret` column is still used for the internal validation as `oidc-provider` does not support multiple secrets per client. */
+export type ApplicationSecret = {
+    tenantId: string;
+    applicationId: string;
+    /** The name of the secret. Should be unique within the application. */
+    name: string;
+    value: string;
+    createdAt: number;
+    expiresAt: number | null;
+};
+export type ApplicationSecretKeys = 'tenantId' | 'applicationId' | 'name' | 'value' | 'createdAt' | 'expiresAt';
+export declare const ApplicationSecrets: GeneratedSchema<ApplicationSecretKeys, CreateApplicationSecret, ApplicationSecret, 'application_secrets', 'application_secret'>;

package/lib/db-entries/application-secret.js

@@ -0,0 +1,41 @@
+// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+import { z } from 'zod';
+const createGuard = z.object({
+    tenantId: z.string().max(21).optional(),
+    applicationId: z.string().min(1).max(21),
+    name: z.string().min(1).max(256),
+    value: z.string().min(1).max(64),
+    createdAt: z.number().optional(),
+    expiresAt: z.number().nullable().optional(),
+});
+const guard = z.object({
+    tenantId: z.string().max(21),
+    applicationId: z.string().min(1).max(21),
+    name: z.string().min(1).max(256),
+    value: z.string().min(1).max(64),
+    createdAt: z.number(),
+    expiresAt: z.number().nullable(),
+});
+export const ApplicationSecrets = Object.freeze({
+    table: 'application_secrets',
+    tableSingular: 'application_secret',
+    fields: {
+        tenantId: 'tenant_id',
+        applicationId: 'application_id',
+        name: 'name',
+        value: 'value',
+        createdAt: 'created_at',
+        expiresAt: 'expires_at',
+    },
+    fieldKeys: [
+        'tenantId',
+        'applicationId',
+        'name',
+        'value',
+        'createdAt',
+        'expiresAt',
+    ],
+    createGuard,
+    guard,
+    updateGuard: guard.partial(),
+});

package/lib/db-entries/application-sign-in-experience.d.ts

@@ -1,4 +1,4 @@
-import { Branding, GeneratedSchema } from './../foundations/index.js';
+import { PartialColor, Branding, GeneratedSchema } from './../foundations/index.js';
 /**
  * Application level sign-in experience configuration.
  *
@@ -8,6 +8,7 @@ import { Branding, GeneratedSchema } from './../foundations/index.js';
 export type CreateApplicationSignInExperience = {
     tenantId?: string;
     applicationId: string;
+    color?: PartialColor;
     branding?: Branding;
     termsOfUseUrl?: string | null;
     privacyPolicyUrl?: string | null;
@@ -17,10 +18,11 @@ export type CreateApplicationSignInExperience = {
 export type ApplicationSignInExperience = {
     tenantId: string;
     applicationId: string;
+    color: PartialColor;
     branding: Branding;
     termsOfUseUrl: string | null;
     privacyPolicyUrl: string | null;
     displayName: string | null;
 };
-export type ApplicationSignInExperienceKeys = 'tenantId' | 'applicationId' | 'branding' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'displayName';
+export type ApplicationSignInExperienceKeys = 'tenantId' | 'applicationId' | 'color' | 'branding' | 'termsOfUseUrl' | 'privacyPolicyUrl' | 'displayName';
 export declare const ApplicationSignInExperiences: GeneratedSchema<ApplicationSignInExperienceKeys, CreateApplicationSignInExperience, ApplicationSignInExperience, 'application_sign_in_experiences', 'application_sign_in_experience'>;

package/lib/db-entries/application-sign-in-experience.js

@@ -1,9 +1,10 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { brandingGuard } from './../foundations/index.js';
+import { partialColorGuard, brandingGuard } from './../foundations/index.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
     applicationId: z.string().min(1).max(21),
+    color: partialColorGuard.optional(),
     branding: brandingGuard.optional(),
     termsOfUseUrl: z.string().max(2048).nullable().optional(),
     privacyPolicyUrl: z.string().max(2048).nullable().optional(),
@@ -12,6 +13,7 @@ const createGuard = z.object({
 const guard = z.object({
     tenantId: z.string().max(21),
     applicationId: z.string().min(1).max(21),
+    color: partialColorGuard,
     branding: brandingGuard,
     termsOfUseUrl: z.string().max(2048).nullable(),
     privacyPolicyUrl: z.string().max(2048).nullable(),
@@ -23,6 +25,7 @@ export const ApplicationSignInExperiences = Object.freeze({
     fields: {
         tenantId: 'tenant_id',
         applicationId: 'application_id',
+        color: 'color',
         branding: 'branding',
         termsOfUseUrl: 'terms_of_use_url',
         privacyPolicyUrl: 'privacy_policy_url',
@@ -31,6 +34,7 @@ export const ApplicationSignInExperiences = Object.freeze({
     fieldKeys: [
         'tenantId',
         'applicationId',
+        'color',
         'branding',
         'termsOfUseUrl',
         'privacyPolicyUrl',

package/lib/db-entries/application.d.ts

@@ -1,4 +1,4 @@
-import { OidcClientMetadata, CustomClientMetadata, ProtectedAppMetadata, GeneratedSchema } from './../foundations/index.js';
+import { OidcClientMetadata, CustomClientMetadata, ProtectedAppMetadata, JsonObject, GeneratedSchema } from './../foundations/index.js';
 import { ApplicationType } from './custom-types.js';
 /**
  *
@@ -9,12 +9,14 @@ export type CreateApplication = {
     tenantId?: string;
     id: string;
     name: string;
+    /** @deprecated The internal client secret. Note it is only used for internal validation, and the actual secret should be stored in the `application_secrets` table. You should NOT use it unless you are sure what you are doing. */
     secret: string;
     description?: string | null;
     type: ApplicationType;
     oidcClientMetadata: OidcClientMetadata;
     customClientMetadata?: CustomClientMetadata;
     protectedAppMetadata?: ProtectedAppMetadata | null;
+    customData?: JsonObject;
     isThirdParty?: boolean;
     createdAt?: number;
 };
@@ -22,14 +24,16 @@ export type Application = {
     tenantId: string;
     id: string;
     name: string;
+    /** @deprecated The internal client secret. Note it is only used for internal validation, and the actual secret should be stored in the `application_secrets` table. You should NOT use it unless you are sure what you are doing. */
     secret: string;
     description: string | null;
     type: ApplicationType;
     oidcClientMetadata: OidcClientMetadata;
     customClientMetadata: CustomClientMetadata;
     protectedAppMetadata: ProtectedAppMetadata | null;
+    customData: JsonObject;
     isThirdParty: boolean;
     createdAt: number;
 };
-export type ApplicationKeys = 'tenantId' | 'id' | 'name' | 'secret' | 'description' | 'type' | 'oidcClientMetadata' | 'customClientMetadata' | 'protectedAppMetadata' | 'isThirdParty' | 'createdAt';
+export type ApplicationKeys = 'tenantId' | 'id' | 'name' | 'secret' | 'description' | 'type' | 'oidcClientMetadata' | 'customClientMetadata' | 'protectedAppMetadata' | 'customData' | 'isThirdParty' | 'createdAt';
 export declare const Applications: GeneratedSchema<ApplicationKeys, CreateApplication, Application, 'applications', 'application'>;

package/lib/db-entries/application.js

@@ -1,6 +1,6 @@
 // THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
 import { z } from 'zod';
-import { oidcClientMetadataGuard, customClientMetadataGuard, protectedAppMetadataGuard } from './../foundations/index.js';
+import { oidcClientMetadataGuard, customClientMetadataGuard, protectedAppMetadataGuard, jsonObjectGuard } from './../foundations/index.js';
 import { ApplicationType } from './custom-types.js';
 const createGuard = z.object({
     tenantId: z.string().max(21).optional(),
@@ -12,6 +12,7 @@ const createGuard = z.object({
     oidcClientMetadata: oidcClientMetadataGuard,
     customClientMetadata: customClientMetadataGuard.optional(),
     protectedAppMetadata: protectedAppMetadataGuard.nullable().optional(),
+    customData: jsonObjectGuard.optional(),
     isThirdParty: z.boolean().optional(),
     createdAt: z.number().optional(),
 });
@@ -25,6 +26,7 @@ const guard = z.object({
     oidcClientMetadata: oidcClientMetadataGuard,
     customClientMetadata: customClientMetadataGuard,
     protectedAppMetadata: protectedAppMetadataGuard.nullable(),
+    customData: jsonObjectGuard,
     isThirdParty: z.boolean(),
     createdAt: z.number(),
 });
@@ -41,6 +43,7 @@ export const Applications = Object.freeze({
         oidcClientMetadata: 'oidc_client_metadata',
         customClientMetadata: 'custom_client_metadata',
         protectedAppMetadata: 'protected_app_metadata',
+        customData: 'custom_data',
         isThirdParty: 'is_third_party',
         createdAt: 'created_at',
     },
@@ -54,6 +57,7 @@ export const Applications = Object.freeze({
         'oidcClientMetadata',
         'customClientMetadata',
         'protectedAppMetadata',
+        'customData',
         'isThirdParty',
         'createdAt',
     ],

package/lib/db-entries/custom-types.d.ts

@@ -37,6 +37,8 @@ export declare enum AgreeToTermsPolicy {
 }
 export declare enum UsersPasswordEncryptionMethod {
     Argon2i = "Argon2i",
+    Argon2id = "Argon2id",
+    Argon2d = "Argon2d",
     SHA1 = "SHA1",
     SHA256 = "SHA256",
     MD5 = "MD5",

package/lib/db-entries/custom-types.js

@@ -46,6 +46,8 @@ export var AgreeToTermsPolicy;
 export var UsersPasswordEncryptionMethod;
 (function (UsersPasswordEncryptionMethod) {
     UsersPasswordEncryptionMethod["Argon2i"] = "Argon2i";
+    UsersPasswordEncryptionMethod["Argon2id"] = "Argon2id";
+    UsersPasswordEncryptionMethod["Argon2d"] = "Argon2d";
     UsersPasswordEncryptionMethod["SHA1"] = "SHA1";
     UsersPasswordEncryptionMethod["SHA256"] = "SHA256";
     UsersPasswordEncryptionMethod["MD5"] = "MD5";