@logto/schemas 1.21.0 → 1.23.0

package/lib/types/saml-application.d.ts

@@ -0,0 +1,493 @@
+import { z } from 'zod';
+export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extendShape<Pick<z.objectUtil.extendShape<{
+    type: z.ZodOptional<z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>>;
+    name: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+    customData: z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>>;
+    description: z.ZodOptional<z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>>;
+    oidcClientMetadata: z.ZodOptional<z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>>;
+    customClientMetadata: z.ZodOptional<z.ZodOptional<z.ZodType<{
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+    }, z.ZodTypeDef, {
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+    }>>>;
+    protectedAppMetadata: z.ZodOptional<z.ZodOptional<z.ZodType<{
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                type: string;
+                value: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null, z.ZodTypeDef, {
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                type: string;
+                value: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null>>>;
+    isThirdParty: z.ZodOptional<z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>>;
+}, Pick<{
+    tenantId: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    name: z.ZodType<string, z.ZodTypeDef, string>;
+    secret: z.ZodType<string, z.ZodTypeDef, string>;
+    description: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+    type: z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>;
+    oidcClientMetadata: z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>;
+    customClientMetadata: z.ZodOptional<z.ZodType<{
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+    }, z.ZodTypeDef, {
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+    }>>;
+    protectedAppMetadata: z.ZodOptional<z.ZodType<{
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                type: string;
+                value: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null, z.ZodTypeDef, {
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                type: string;
+                value: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null>>;
+    customData: z.ZodOptional<z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>;
+    isThirdParty: z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>;
+    createdAt: z.ZodOptional<z.ZodType<number, z.ZodTypeDef, number>>;
+}, "type" | "name">>, "name" | "customData" | "description">, {
+    attributeMapping: z.ZodOptional<z.ZodType<import("../index.js").SamlAttributeMapping, z.ZodTypeDef, import("../index.js").SamlAttributeMapping>>;
+    entityId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+    acsUrl: z.ZodOptional<z.ZodType<import("../index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../index.js").SamlAcsUrl | null>>;
+}>, "strip", z.ZodTypeAny, {
+    name: string;
+    customData?: import("@withtyped/server").JsonObject;
+    description?: string | null;
+    attributeMapping?: import("../index.js").SamlAttributeMapping | undefined;
+    entityId?: string | null | undefined;
+    acsUrl?: import("../index.js").SamlAcsUrl | null | undefined;
+}, {
+    name: string;
+    customData?: import("@withtyped/server").JsonObject;
+    description?: string | null;
+    attributeMapping?: import("../index.js").SamlAttributeMapping | undefined;
+    entityId?: string | null | undefined;
+    acsUrl?: import("../index.js").SamlAcsUrl | null | undefined;
+}>;
+export type CreateSamlApplication = z.infer<typeof samlApplicationCreateGuard>;
+export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendShape<Pick<Omit<{
+    customData: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>>>;
+    description: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>>>;
+    oidcClientMetadata: z.ZodOptional<z.ZodOptional<z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>>>;
+    customClientMetadata: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<{
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+    }, z.ZodTypeDef, {
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+    }>>>>;
+    protectedAppMetadata: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<{
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                type: string;
+                value: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null, z.ZodTypeDef, {
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                type: string;
+                value: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null>>>>;
+    isThirdParty: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>>>;
+    type: z.ZodOptional<z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>>;
+    name: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
+}, "type" | "isThirdParty">, "name" | "customData" | "description">, {
+    attributeMapping: z.ZodOptional<z.ZodType<import("../index.js").SamlAttributeMapping, z.ZodTypeDef, import("../index.js").SamlAttributeMapping>>;
+    entityId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
+    acsUrl: z.ZodOptional<z.ZodType<import("../index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../index.js").SamlAcsUrl | null>>;
+}>, "strip", z.ZodTypeAny, {
+    name?: string | undefined;
+    customData?: import("@withtyped/server").JsonObject;
+    description?: string | null;
+    attributeMapping?: import("../index.js").SamlAttributeMapping | undefined;
+    entityId?: string | null | undefined;
+    acsUrl?: import("../index.js").SamlAcsUrl | null | undefined;
+}, {
+    name?: string | undefined;
+    customData?: import("@withtyped/server").JsonObject;
+    description?: string | null;
+    attributeMapping?: import("../index.js").SamlAttributeMapping | undefined;
+    entityId?: string | null | undefined;
+    acsUrl?: import("../index.js").SamlAcsUrl | null | undefined;
+}>;
+export type PatchSamlApplication = z.infer<typeof samlApplicationPatchGuard>;
+export declare const samlApplicationResponseGuard: z.ZodObject<z.objectUtil.extendShape<Omit<{
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    name: z.ZodType<string, z.ZodTypeDef, string>;
+    secret: z.ZodType<string, z.ZodTypeDef, string>;
+    description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    type: z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>;
+    oidcClientMetadata: z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>;
+    customClientMetadata: z.ZodType<{
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+    }, z.ZodTypeDef, {
+        corsAllowedOrigins?: string[] | undefined;
+        idTokenTtl?: number | undefined;
+        refreshTokenTtl?: number | undefined;
+        refreshTokenTtlInDays?: number | undefined;
+        tenantId?: string | undefined;
+        alwaysIssueRefreshToken?: boolean | undefined;
+        rotateRefreshToken?: boolean | undefined;
+    }>;
+    protectedAppMetadata: z.ZodType<{
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                type: string;
+                value: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null, z.ZodTypeDef, {
+        host: string;
+        origin: string;
+        sessionDuration: number;
+        pageRules: {
+            path: string;
+        }[];
+        customDomains?: {
+            status: import("../index.js").DomainStatus;
+            domain: string;
+            errorMessage: string | null;
+            dnsRecords: {
+                type: string;
+                value: string;
+                name: string;
+            }[];
+            cloudflareData: {
+                status: string;
+                id: string;
+                ssl: {
+                    status: string;
+                    validation_errors?: {
+                        message: string;
+                    }[] | undefined;
+                };
+                verification_errors?: string[] | undefined;
+            } | null;
+        }[] | undefined;
+    } | null>;
+    customData: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
+    isThirdParty: z.ZodType<boolean, z.ZodTypeDef, boolean>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+}, "secret" | "oidcClientMetadata" | "customClientMetadata" | "protectedAppMetadata">, Pick<{
+    applicationId: z.ZodType<string, z.ZodTypeDef, string>;
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    attributeMapping: z.ZodType<import("../index.js").SamlAttributeMapping, z.ZodTypeDef, import("../index.js").SamlAttributeMapping>;
+    entityId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    acsUrl: z.ZodType<import("../index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../index.js").SamlAcsUrl | null>;
+}, "attributeMapping" | "entityId" | "acsUrl">>, "strip", z.ZodTypeAny, {
+    type: import("../index.js").ApplicationType;
+    name: string;
+    id: string;
+    tenantId: string;
+    createdAt: number;
+    customData: import("@withtyped/server").JsonObject;
+    description: string | null;
+    isThirdParty: boolean;
+    attributeMapping: import("../index.js").SamlAttributeMapping;
+    entityId: string | null;
+    acsUrl: import("../index.js").SamlAcsUrl | null;
+}, {
+    type: import("../index.js").ApplicationType;
+    name: string;
+    id: string;
+    tenantId: string;
+    createdAt: number;
+    customData: import("@withtyped/server").JsonObject;
+    description: string | null;
+    isThirdParty: boolean;
+    attributeMapping: import("../index.js").SamlAttributeMapping;
+    entityId: string | null;
+    acsUrl: import("../index.js").SamlAcsUrl | null;
+}>;
+export type SamlApplicationResponse = z.infer<typeof samlApplicationResponseGuard>;
+type FingerprintFormat = {
+    formatted: string;
+    unformatted: string;
+};
+export type CertificateFingerprints = {
+    sha256: FingerprintFormat;
+};
+export declare const certificateFingerprintsGuard: z.ZodObject<{
+    sha256: z.ZodObject<{
+        formatted: z.ZodString;
+        unformatted: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        formatted: string;
+        unformatted: string;
+    }, {
+        formatted: string;
+        unformatted: string;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    sha256: {
+        formatted: string;
+        unformatted: string;
+    };
+}, {
+    sha256: {
+        formatted: string;
+        unformatted: string;
+    };
+}>;
+export declare const samlApplicationSecretResponseGuard: z.ZodObject<z.objectUtil.extendShape<Omit<{
+    id: z.ZodType<string, z.ZodTypeDef, string>;
+    tenantId: z.ZodType<string, z.ZodTypeDef, string>;
+    applicationId: z.ZodType<string, z.ZodTypeDef, string>;
+    privateKey: z.ZodType<string, z.ZodTypeDef, string>;
+    certificate: z.ZodType<string, z.ZodTypeDef, string>;
+    createdAt: z.ZodType<number, z.ZodTypeDef, number>;
+    expiresAt: z.ZodType<number, z.ZodTypeDef, number>;
+    active: z.ZodType<boolean, z.ZodTypeDef, boolean>;
+}, "applicationId" | "tenantId" | "privateKey">, {
+    fingerprints: z.ZodObject<{
+        sha256: z.ZodObject<{
+            formatted: z.ZodString;
+            unformatted: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            formatted: string;
+            unformatted: string;
+        }, {
+            formatted: string;
+            unformatted: string;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        sha256: {
+            formatted: string;
+            unformatted: string;
+        };
+    }, {
+        sha256: {
+            formatted: string;
+            unformatted: string;
+        };
+    }>;
+}>, "strip", z.ZodTypeAny, {
+    id: string;
+    createdAt: number;
+    expiresAt: number;
+    certificate: string;
+    active: boolean;
+    fingerprints: {
+        sha256: {
+            formatted: string;
+            unformatted: string;
+        };
+    };
+}, {
+    id: string;
+    createdAt: number;
+    expiresAt: number;
+    certificate: string;
+    active: boolean;
+    fingerprints: {
+        sha256: {
+            formatted: string;
+            unformatted: string;
+        };
+    };
+}>;
+export type SamlApplicationSecretResponse = z.infer<typeof samlApplicationSecretResponseGuard>;
+export {};

package/lib/types/saml-application.js

@@ -0,0 +1,54 @@
+import { z } from 'zod';
+import { Applications } from '../db-entries/application.js';
+import { SamlApplicationConfigs } from '../db-entries/saml-application-config.js';
+import { SamlApplicationSecrets } from '../db-entries/saml-application-secret.js';
+import { applicationCreateGuard, applicationPatchGuard } from './application.js';
+const samlAppConfigGuard = SamlApplicationConfigs.guard.pick({
+    attributeMapping: true,
+    entityId: true,
+    acsUrl: true,
+});
+export const samlApplicationCreateGuard = applicationCreateGuard
+    .pick({
+    name: true,
+    description: true,
+    customData: true,
+})
+    // The reason for encapsulating attributeMapping and spMetadata into an object within the config field is that you cannot provide only one of `attributeMapping` or `spMetadata`. Due to the structure of the `saml_application_configs` table, both must be not null.
+    .merge(samlAppConfigGuard.partial());
+export const samlApplicationPatchGuard = applicationPatchGuard
+    .pick({
+    name: true,
+    description: true,
+    customData: true,
+})
+    // The reason for encapsulating attributeMapping and spMetadata into an object within the config field is that you cannot provide only one of `attributeMapping` or `spMetadata`. Due to the structure of the `saml_application_configs` table, both must be not null.
+    .merge(samlAppConfigGuard.partial());
+export const samlApplicationResponseGuard = Applications.guard
+    .omit({
+    secret: true,
+    oidcClientMetadata: true,
+    customClientMetadata: true,
+    protectedAppMetadata: true,
+})
+    .merge(
+// Partial to allow the optional fields to be omitted in the response.
+// When starting to create a SAML application, SAML configuration is optional, which can lead to the absence of SAML configuration.
+samlAppConfigGuard);
+const fingerprintFormatGuard = z.object({
+    formatted: z.string(),
+    unformatted: z.string(),
+});
+export const certificateFingerprintsGuard = z.object({
+    sha256: fingerprintFormatGuard,
+});
+// Make sure the `privateKey` is not exposed in the response.
+export const samlApplicationSecretResponseGuard = SamlApplicationSecrets.guard
+    .omit({
+    tenantId: true,
+    applicationId: true,
+    privateKey: true,
+})
+    .extend({
+    fingerprints: certificateFingerprintsGuard,
+});

package/lib/types/sign-in-experience.d.ts

@@ -135,6 +135,9 @@ export declare const fullSignInExperienceGuard: z.ZodObject<z.objectUtil.extendS
         policy: import("../index.js").MfaPolicy;
     }>;
     singleSignOnEnabled: z.ZodType<boolean, z.ZodTypeDef, boolean>;
+    supportEmail: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    supportWebsiteUrl: z.ZodType<string | null, z.ZodTypeDef, string | null>;
+    unknownSessionRedirectUrl: z.ZodType<string | null, z.ZodTypeDef, string | null>;
 }, {
     socialConnectors: z.ZodArray<z.ZodObject<Omit<z.objectUtil.extendShape<{
         id: z.ZodString;
@@ -326,7 +329,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<z.objectUtil.extendS
     }, {
         platform: z.ZodNullable<z.ZodNativeEnum<typeof import("@logto/connector-kit").ConnectorPlatform>>;
         isStandard: z.ZodOptional<z.ZodBoolean>;
-    }>, "description" | "customData" | "readme" | "configTemplate" | "formItems">, "strip", z.ZodTypeAny, {
+    }>, "customData" | "description" | "readme" | "configTemplate" | "formItems">, "strip", z.ZodTypeAny, {
         name: {
             en: string;
         } & {
@@ -667,6 +670,9 @@ export declare const fullSignInExperienceGuard: z.ZodObject<z.objectUtil.extendS
     passwordPolicy: import("../index.js").PartialPasswordPolicy;
     mfa: import("../index.js").Mfa;
     singleSignOnEnabled: boolean;
+    supportEmail: string | null;
+    supportWebsiteUrl: string | null;
+    unknownSessionRedirectUrl: string | null;
     socialConnectors: {
         name: {
             en: string;
@@ -842,6 +848,9 @@ export declare const fullSignInExperienceGuard: z.ZodObject<z.objectUtil.extendS
     passwordPolicy: import("../index.js").PartialPasswordPolicy;
     mfa: import("../index.js").Mfa;
     singleSignOnEnabled: boolean;
+    supportEmail: string | null;
+    supportWebsiteUrl: string | null;
+    unknownSessionRedirectUrl: string | null;
     socialConnectors: {
         name: {
             en: string;

package/lib/types/user.d.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { type User } from '../db-entries/index.js';
 import { MfaFactor } from '../foundations/index.js';
-export declare const userInfoSelectFields: readonly ("name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "avatar" | "identities" | "isSuspended" | "lastSignInAt")[];
+export declare const userInfoSelectFields: readonly ("name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "identities" | "isSuspended" | "lastSignInAt")[];
 export declare const userInfoGuard: z.ZodObject<Pick<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
@@ -118,18 +118,18 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
     updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "avatar" | "identities" | "isSuspended" | "lastSignInAt">, "strip", z.ZodTypeAny, {
+}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "identities" | "isSuspended" | "lastSignInAt">, "strip", z.ZodTypeAny, {
     name: string | null;
     id: string;
     applicationId: string | null;
     username: string | null;
     createdAt: number;
     profile: import("../foundations/index.js").UserProfile;
+    avatar: string | null;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    avatar: string | null;
     identities: import("../foundations/index.js").Identities;
     isSuspended: boolean;
     lastSignInAt: number | null;
@@ -140,11 +140,11 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     username: string | null;
     createdAt: number;
     profile: import("../foundations/index.js").UserProfile;
+    avatar: string | null;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    avatar: string | null;
     identities: import("../foundations/index.js").Identities;
     isSuspended: boolean;
     lastSignInAt: number | null;
@@ -266,7 +266,7 @@ export declare const userProfileResponseGuard: z.ZodObject<z.objectUtil.extendSh
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
     updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "avatar" | "identities" | "isSuspended" | "lastSignInAt">, {
+}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "identities" | "isSuspended" | "lastSignInAt">, {
     hasPassword: z.ZodOptional<z.ZodBoolean>;
     ssoIdentities: z.ZodOptional<z.ZodArray<import("../foundations/schemas.js").Guard<import("../db-entries/user-sso-identity.js").UserSsoIdentity>, "many">>;
 }>, "strip", z.ZodTypeAny, {
@@ -276,11 +276,11 @@ export declare const userProfileResponseGuard: z.ZodObject<z.objectUtil.extendSh
     username: string | null;
     createdAt: number;
     profile: import("../foundations/index.js").UserProfile;
+    avatar: string | null;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    avatar: string | null;
     identities: import("../foundations/index.js").Identities;
     isSuspended: boolean;
     lastSignInAt: number | null;
@@ -293,11 +293,11 @@ export declare const userProfileResponseGuard: z.ZodObject<z.objectUtil.extendSh
     username: string | null;
     createdAt: number;
     profile: import("../foundations/index.js").UserProfile;
+    avatar: string | null;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
     updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    avatar: string | null;
     identities: import("../foundations/index.js").Identities;
     isSuspended: boolean;
     lastSignInAt: number | null;

package/lib/utils/application.js

@@ -4,4 +4,6 @@ export const hasSecrets = (type) => [
     ApplicationType.MachineToMachine,
     ApplicationType.Protected,
     ApplicationType.Traditional,
+    // SAML applications are used as traditional web applications.
+    ApplicationType.SAML,
 ].includes(type);