@logto/schemas 1.23.0 → 1.24.0

package/lib/types/saml-application.d.ts

@@ -1,10 +1,11 @@
 import { z } from 'zod';
-export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extendShape<Pick<z.objectUtil.extendShape<{
+import { NameIdFormat } from '../foundations/index.js';
+export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extendShape<z.objectUtil.extendShape<Pick<z.objectUtil.extendShape<{
     type: z.ZodOptional<z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>>;
     name: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
-    customData: z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>>;
+    customData: z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>>>;
     description: z.ZodOptional<z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>>;
-    oidcClientMetadata: z.ZodOptional<z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>>;
+    oidcClientMetadata: z.ZodOptional<z.ZodType<import("../foundations/index.js").OidcClientMetadata, z.ZodTypeDef, import("../foundations/index.js").OidcClientMetadata>>;
     customClientMetadata: z.ZodOptional<z.ZodOptional<z.ZodType<{
         corsAllowedOrigins?: string[] | undefined;
         idTokenTtl?: number | undefined;
@@ -30,7 +31,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
             path: string;
         }[];
         customDomains?: {
-            status: import("../index.js").DomainStatus;
+            status: import("../foundations/index.js").DomainStatus;
             domain: string;
             errorMessage: string | null;
             dnsRecords: {
@@ -58,7 +59,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
             path: string;
         }[];
         customDomains?: {
-            status: import("../index.js").DomainStatus;
+            status: import("../foundations/index.js").DomainStatus;
             domain: string;
             errorMessage: string | null;
             dnsRecords: {
@@ -87,7 +88,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
     secret: z.ZodType<string, z.ZodTypeDef, string>;
     description: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
     type: z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>;
-    oidcClientMetadata: z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>;
+    oidcClientMetadata: z.ZodType<import("../foundations/index.js").OidcClientMetadata, z.ZodTypeDef, import("../foundations/index.js").OidcClientMetadata>;
     customClientMetadata: z.ZodOptional<z.ZodType<{
         corsAllowedOrigins?: string[] | undefined;
         idTokenTtl?: number | undefined;
@@ -113,7 +114,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
             path: string;
         }[];
         customDomains?: {
-            status: import("../index.js").DomainStatus;
+            status: import("../foundations/index.js").DomainStatus;
             domain: string;
             errorMessage: string | null;
             dnsRecords: {
@@ -141,7 +142,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
             path: string;
         }[];
         customDomains?: {
-            status: import("../index.js").DomainStatus;
+            status: import("../foundations/index.js").DomainStatus;
             domain: string;
             errorMessage: string | null;
             dnsRecords: {
@@ -162,33 +163,57 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
             } | null;
         }[] | undefined;
     } | null>>;
-    customData: z.ZodOptional<z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>;
+    customData: z.ZodOptional<z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>>;
     isThirdParty: z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>;
     createdAt: z.ZodOptional<z.ZodType<number, z.ZodTypeDef, number>>;
 }, "type" | "name">>, "name" | "customData" | "description">, {
-    attributeMapping: z.ZodOptional<z.ZodType<import("../index.js").SamlAttributeMapping, z.ZodTypeDef, import("../index.js").SamlAttributeMapping>>;
+    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>>>;
     entityId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
-    acsUrl: z.ZodOptional<z.ZodType<import("../index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../index.js").SamlAcsUrl | null>>;
+    acsUrl: z.ZodOptional<z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>>;
+    encryption: z.ZodOptional<z.ZodType<{
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null, z.ZodTypeDef, {
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null>>;
+    nameIdFormat: z.ZodOptional<z.ZodType<NameIdFormat, z.ZodTypeDef, NameIdFormat>>;
+}>, {
+    nameIdFormat: z.ZodDefault<z.ZodOptional<z.ZodNativeEnum<typeof NameIdFormat>>>;
 }>, "strip", z.ZodTypeAny, {
     name: string;
-    customData?: import("@withtyped/server").JsonObject;
+    nameIdFormat: NameIdFormat;
+    customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: import("../index.js").SamlAttributeMapping | undefined;
+    attributeMapping?: Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>> | undefined;
     entityId?: string | null | undefined;
-    acsUrl?: import("../index.js").SamlAcsUrl | null | undefined;
+    acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
+    encryption?: {
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null | undefined;
 }, {
     name: string;
-    customData?: import("@withtyped/server").JsonObject;
+    customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: import("../index.js").SamlAttributeMapping | undefined;
+    attributeMapping?: Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>> | undefined;
     entityId?: string | null | undefined;
-    acsUrl?: import("../index.js").SamlAcsUrl | null | undefined;
+    acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
+    encryption?: {
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null | undefined;
+    nameIdFormat?: NameIdFormat | undefined;
 }>;
-export type CreateSamlApplication = z.infer<typeof samlApplicationCreateGuard>;
-export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendShape<Pick<Omit<{
-    customData: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>>>>;
+export type CreateSamlApplication = z.input<typeof samlApplicationCreateGuard>;
+export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendShape<z.objectUtil.extendShape<Pick<Omit<{
+    customData: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>>>>;
     description: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>>>;
-    oidcClientMetadata: z.ZodOptional<z.ZodOptional<z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>>>;
+    oidcClientMetadata: z.ZodOptional<z.ZodOptional<z.ZodType<import("../foundations/index.js").OidcClientMetadata, z.ZodTypeDef, import("../foundations/index.js").OidcClientMetadata>>>;
     customClientMetadata: z.ZodOptional<z.ZodOptional<z.ZodOptional<z.ZodType<{
         corsAllowedOrigins?: string[] | undefined;
         idTokenTtl?: number | undefined;
@@ -214,7 +239,7 @@ export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendS
             path: string;
         }[];
         customDomains?: {
-            status: import("../index.js").DomainStatus;
+            status: import("../foundations/index.js").DomainStatus;
             domain: string;
             errorMessage: string | null;
             dnsRecords: {
@@ -242,7 +267,7 @@ export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendS
             path: string;
         }[];
         customDomains?: {
-            status: import("../index.js").DomainStatus;
+            status: import("../foundations/index.js").DomainStatus;
             domain: string;
             errorMessage: string | null;
             dnsRecords: {
@@ -267,33 +292,57 @@ export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendS
     type: z.ZodOptional<z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>>;
     name: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
 }, "type" | "isThirdParty">, "name" | "customData" | "description">, {
-    attributeMapping: z.ZodOptional<z.ZodType<import("../index.js").SamlAttributeMapping, z.ZodTypeDef, import("../index.js").SamlAttributeMapping>>;
+    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>>>;
     entityId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
-    acsUrl: z.ZodOptional<z.ZodType<import("../index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../index.js").SamlAcsUrl | null>>;
+    acsUrl: z.ZodOptional<z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>>;
+    encryption: z.ZodOptional<z.ZodType<{
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null, z.ZodTypeDef, {
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null>>;
+    nameIdFormat: z.ZodOptional<z.ZodType<NameIdFormat, z.ZodTypeDef, NameIdFormat>>;
+}>, {
+    nameIdFormat: z.ZodOptional<z.ZodNativeEnum<typeof NameIdFormat>>;
 }>, "strip", z.ZodTypeAny, {
     name?: string | undefined;
-    customData?: import("@withtyped/server").JsonObject;
+    customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: import("../index.js").SamlAttributeMapping | undefined;
+    attributeMapping?: Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>> | undefined;
     entityId?: string | null | undefined;
-    acsUrl?: import("../index.js").SamlAcsUrl | null | undefined;
+    acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
+    encryption?: {
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null | undefined;
+    nameIdFormat?: NameIdFormat | undefined;
 }, {
     name?: string | undefined;
-    customData?: import("@withtyped/server").JsonObject;
+    customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: import("../index.js").SamlAttributeMapping | undefined;
+    attributeMapping?: Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>> | undefined;
     entityId?: string | null | undefined;
-    acsUrl?: import("../index.js").SamlAcsUrl | null | undefined;
+    acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
+    encryption?: {
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null | undefined;
+    nameIdFormat?: NameIdFormat | undefined;
 }>;
 export type PatchSamlApplication = z.infer<typeof samlApplicationPatchGuard>;
-export declare const samlApplicationResponseGuard: z.ZodObject<z.objectUtil.extendShape<Omit<{
+export declare const samlApplicationResponseGuard: z.ZodObject<z.objectUtil.extendShape<z.objectUtil.extendShape<Omit<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
     name: z.ZodType<string, z.ZodTypeDef, string>;
     secret: z.ZodType<string, z.ZodTypeDef, string>;
     description: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     type: z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>;
-    oidcClientMetadata: z.ZodType<import("../index.js").OidcClientMetadata, z.ZodTypeDef, import("../index.js").OidcClientMetadata>;
+    oidcClientMetadata: z.ZodType<import("../foundations/index.js").OidcClientMetadata, z.ZodTypeDef, import("../foundations/index.js").OidcClientMetadata>;
     customClientMetadata: z.ZodType<{
         corsAllowedOrigins?: string[] | undefined;
         idTokenTtl?: number | undefined;
@@ -319,7 +368,7 @@ export declare const samlApplicationResponseGuard: z.ZodObject<z.objectUtil.exte
             path: string;
         }[];
         customDomains?: {
-            status: import("../index.js").DomainStatus;
+            status: import("../foundations/index.js").DomainStatus;
             domain: string;
             errorMessage: string | null;
             dnsRecords: {
@@ -347,7 +396,7 @@ export declare const samlApplicationResponseGuard: z.ZodObject<z.objectUtil.exte
             path: string;
         }[];
         customDomains?: {
-            status: import("../index.js").DomainStatus;
+            status: import("../foundations/index.js").DomainStatus;
             domain: string;
             errorMessage: string | null;
             dnsRecords: {
@@ -368,39 +417,55 @@ export declare const samlApplicationResponseGuard: z.ZodObject<z.objectUtil.exte
             } | null;
         }[] | undefined;
     } | null>;
-    customData: z.ZodType<import("@withtyped/server").JsonObject, z.ZodTypeDef, import("@withtyped/server").JsonObject>;
+    customData: z.ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
     isThirdParty: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
 }, "secret" | "oidcClientMetadata" | "customClientMetadata" | "protectedAppMetadata">, Pick<{
     applicationId: z.ZodType<string, z.ZodTypeDef, string>;
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
-    attributeMapping: z.ZodType<import("../index.js").SamlAttributeMapping, z.ZodTypeDef, import("../index.js").SamlAttributeMapping>;
+    attributeMapping: z.ZodType<Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>>;
     entityId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
-    acsUrl: z.ZodType<import("../index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../index.js").SamlAcsUrl | null>;
-}, "attributeMapping" | "entityId" | "acsUrl">>, "strip", z.ZodTypeAny, {
+    acsUrl: z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>;
+    encryption: z.ZodType<{
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null, z.ZodTypeDef, {
+        encryptAssertion?: boolean | undefined;
+        encryptThenSign?: boolean | undefined;
+        certificate?: string | undefined;
+    } | null>;
+    nameIdFormat: z.ZodType<NameIdFormat, z.ZodTypeDef, NameIdFormat>;
+}, "attributeMapping" | "entityId" | "acsUrl" | "encryption" | "nameIdFormat">>, {
+    nameIdFormat: z.ZodNativeEnum<typeof NameIdFormat>;
+}>, "strip", z.ZodTypeAny, {
     type: import("../index.js").ApplicationType;
     name: string;
     id: string;
     tenantId: string;
     createdAt: number;
-    customData: import("@withtyped/server").JsonObject;
+    customData: import("@withtyped/server/lib/types.js").JsonObject;
     description: string | null;
     isThirdParty: boolean;
-    attributeMapping: import("../index.js").SamlAttributeMapping;
+    attributeMapping: import("../foundations/index.js").SamlAttributeMapping;
     entityId: string | null;
-    acsUrl: import("../index.js").SamlAcsUrl | null;
+    acsUrl: import("../foundations/index.js").SamlAcsUrl | null;
+    encryption: import("../foundations/index.js").SamlEncryption | null;
+    nameIdFormat: NameIdFormat;
 }, {
     type: import("../index.js").ApplicationType;
     name: string;
     id: string;
     tenantId: string;
     createdAt: number;
-    customData: import("@withtyped/server").JsonObject;
+    customData: import("@withtyped/server/lib/types.js").JsonObject;
     description: string | null;
     isThirdParty: boolean;
-    attributeMapping: import("../index.js").SamlAttributeMapping;
+    attributeMapping: import("../foundations/index.js").SamlAttributeMapping;
     entityId: string | null;
-    acsUrl: import("../index.js").SamlAcsUrl | null;
+    acsUrl: import("../foundations/index.js").SamlAcsUrl | null;
+    encryption: import("../foundations/index.js").SamlEncryption | null;
+    nameIdFormat: NameIdFormat;
 }>;
 export type SamlApplicationResponse = z.infer<typeof samlApplicationResponseGuard>;
 type FingerprintFormat = {
@@ -467,8 +532,8 @@ export declare const samlApplicationSecretResponseGuard: z.ZodObject<z.objectUti
 }>, "strip", z.ZodTypeAny, {
     id: string;
     createdAt: number;
-    expiresAt: number;
     certificate: string;
+    expiresAt: number;
     active: boolean;
     fingerprints: {
         sha256: {
@@ -479,8 +544,8 @@ export declare const samlApplicationSecretResponseGuard: z.ZodObject<z.objectUti
 }, {
     id: string;
     createdAt: number;
-    expiresAt: number;
     certificate: string;
+    expiresAt: number;
     active: boolean;
     fingerprints: {
         sha256: {

package/lib/types/saml-application.js

@@ -2,11 +2,14 @@ import { z } from 'zod';
 import { Applications } from '../db-entries/application.js';
 import { SamlApplicationConfigs } from '../db-entries/saml-application-config.js';
 import { SamlApplicationSecrets } from '../db-entries/saml-application-secret.js';
+import { nameIdFormatGuard, NameIdFormat } from '../foundations/index.js';
 import { applicationCreateGuard, applicationPatchGuard } from './application.js';
 const samlAppConfigGuard = SamlApplicationConfigs.guard.pick({
     attributeMapping: true,
     entityId: true,
     acsUrl: true,
+    encryption: true,
+    nameIdFormat: true,
 });
 export const samlApplicationCreateGuard = applicationCreateGuard
     .pick({
@@ -15,7 +18,8 @@ export const samlApplicationCreateGuard = applicationCreateGuard
     customData: true,
 })
     // The reason for encapsulating attributeMapping and spMetadata into an object within the config field is that you cannot provide only one of `attributeMapping` or `spMetadata`. Due to the structure of the `saml_application_configs` table, both must be not null.
-    .merge(samlAppConfigGuard.partial());
+    .merge(samlAppConfigGuard.partial())
+    .extend({ nameIdFormat: nameIdFormatGuard.optional().default(NameIdFormat.Persistent) });
 export const samlApplicationPatchGuard = applicationPatchGuard
     .pick({
     name: true,
@@ -23,7 +27,8 @@ export const samlApplicationPatchGuard = applicationPatchGuard
     customData: true,
 })
     // The reason for encapsulating attributeMapping and spMetadata into an object within the config field is that you cannot provide only one of `attributeMapping` or `spMetadata`. Due to the structure of the `saml_application_configs` table, both must be not null.
-    .merge(samlAppConfigGuard.partial());
+    .merge(samlAppConfigGuard.partial())
+    .extend({ nameIdFormat: nameIdFormatGuard.optional() });
 export const samlApplicationResponseGuard = Applications.guard
     .omit({
     secret: true,
@@ -34,7 +39,8 @@ export const samlApplicationResponseGuard = Applications.guard
     .merge(
 // Partial to allow the optional fields to be omitted in the response.
 // When starting to create a SAML application, SAML configuration is optional, which can lead to the absence of SAML configuration.
-samlAppConfigGuard);
+samlAppConfigGuard)
+    .extend({ nameIdFormat: nameIdFormatGuard });
 const fingerprintFormatGuard = z.object({
     formatted: z.string(),
     unformatted: z.string(),

package/lib/types/system.d.ts

@@ -39,6 +39,7 @@ export declare const storageProviderDataGuard: z.ZodDiscriminatedUnion<"provider
     endpoint: z.ZodOptional<z.ZodString>;
     region: z.ZodOptional<z.ZodString>;
     bucket: z.ZodString;
+    forcePathStyle: z.ZodOptional<z.ZodBoolean>;
     accessKeyId: z.ZodString;
     accessSecretKey: z.ZodString;
 }, "strip", z.ZodTypeAny, {
@@ -49,6 +50,7 @@ export declare const storageProviderDataGuard: z.ZodDiscriminatedUnion<"provider
     region?: string | undefined;
     publicUrl?: string | undefined;
     endpoint?: string | undefined;
+    forcePathStyle?: boolean | undefined;
 }, {
     provider: StorageProvider.S3Storage;
     bucket: string;
@@ -57,6 +59,7 @@ export declare const storageProviderDataGuard: z.ZodDiscriminatedUnion<"provider
     region?: string | undefined;
     publicUrl?: string | undefined;
     endpoint?: string | undefined;
+    forcePathStyle?: boolean | undefined;
 }>, z.ZodObject<{
     publicUrl: z.ZodOptional<z.ZodString>;
     provider: z.ZodLiteral<StorageProvider.GoogleStorage>;

package/lib/types/system.js

@@ -32,6 +32,7 @@ export const storageProviderDataGuard = z.discriminatedUnion('provider', [
         endpoint: z.string().optional(),
         region: z.string().optional(),
         bucket: z.string(),
+        forcePathStyle: z.boolean().optional(),
         accessKeyId: z.string(),
         accessSecretKey: z.string(),
         ...basicConfig,

package/lib/types/user.d.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { type User } from '../db-entries/index.js';
 import { MfaFactor } from '../foundations/index.js';
-export declare const userInfoSelectFields: readonly ("name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "identities" | "isSuspended" | "lastSignInAt")[];
+export declare const userInfoSelectFields: readonly ("name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "primaryEmail" | "primaryPhone" | "isSuspended" | "lastSignInAt")[];
 export declare const userInfoGuard: z.ZodObject<Pick<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
@@ -118,7 +118,7 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
     updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "identities" | "isSuspended" | "lastSignInAt">, "strip", z.ZodTypeAny, {
+}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "primaryEmail" | "primaryPhone" | "isSuspended" | "lastSignInAt">, "strip", z.ZodTypeAny, {
     name: string | null;
     id: string;
     applicationId: string | null;
@@ -127,10 +127,10 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     profile: import("../foundations/index.js").UserProfile;
     avatar: string | null;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
+    identities: import("../foundations/index.js").Identities;
     updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    identities: import("../foundations/index.js").Identities;
     isSuspended: boolean;
     lastSignInAt: number | null;
 }, {
@@ -142,10 +142,10 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
     profile: import("../foundations/index.js").UserProfile;
     avatar: string | null;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
+    identities: import("../foundations/index.js").Identities;
     updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    identities: import("../foundations/index.js").Identities;
     isSuspended: boolean;
     lastSignInAt: number | null;
 }>;
@@ -266,7 +266,7 @@ export declare const userProfileResponseGuard: z.ZodObject<z.objectUtil.extendSh
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
     createdAt: z.ZodType<number, z.ZodTypeDef, number>;
     updatedAt: z.ZodType<number, z.ZodTypeDef, number>;
-}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "updatedAt" | "primaryEmail" | "primaryPhone" | "identities" | "isSuspended" | "lastSignInAt">, {
+}, "name" | "id" | "applicationId" | "username" | "createdAt" | "profile" | "avatar" | "customData" | "identities" | "updatedAt" | "primaryEmail" | "primaryPhone" | "isSuspended" | "lastSignInAt">, {
     hasPassword: z.ZodOptional<z.ZodBoolean>;
     ssoIdentities: z.ZodOptional<z.ZodArray<import("../foundations/schemas.js").Guard<import("../db-entries/user-sso-identity.js").UserSsoIdentity>, "many">>;
 }>, "strip", z.ZodTypeAny, {
@@ -278,10 +278,10 @@ export declare const userProfileResponseGuard: z.ZodObject<z.objectUtil.extendSh
     profile: import("../foundations/index.js").UserProfile;
     avatar: string | null;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
+    identities: import("../foundations/index.js").Identities;
     updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    identities: import("../foundations/index.js").Identities;
     isSuspended: boolean;
     lastSignInAt: number | null;
     hasPassword?: boolean | undefined;
@@ -295,10 +295,10 @@ export declare const userProfileResponseGuard: z.ZodObject<z.objectUtil.extendSh
     profile: import("../foundations/index.js").UserProfile;
     avatar: string | null;
     customData: import("@withtyped/server/lib/types.js").JsonObject;
+    identities: import("../foundations/index.js").Identities;
     updatedAt: number;
     primaryEmail: string | null;
     primaryPhone: string | null;
-    identities: import("../foundations/index.js").Identities;
     isSuspended: boolean;
     lastSignInAt: number | null;
     hasPassword?: boolean | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/schemas",
-  "version": "1.23.0",
+  "version": "1.24.0",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "license": "MPL-2.0",
   "type": "module",
@@ -66,7 +66,7 @@
     "@logto/connector-kit": "^4.1.0",
     "@logto/core-kit": "^2.5.2",
     "@logto/language-kit": "^1.1.0",
-    "@logto/phrases": "^1.16.0",
+    "@logto/phrases": "^1.17.0",
     "@logto/phrases-experience": "^1.9.0",
     "@logto/shared": "^3.1.2",
     "@withtyped/server": "^0.14.0",

package/tables/applications.sql

@@ -17,10 +17,7 @@ create table applications (
   custom_data jsonb /* @use JsonObject */ not null default '{}'::jsonb,
   is_third_party boolean not null default false,
   created_at timestamptz not null default(now()),
-  primary key (id),
-  constraint check_saml_app_third_party_consistency check (
-    type != 'SAML' OR (type = 'SAML' AND is_third_party = true)
-  )
+  primary key (id)
 );
 
 create index applications__id

package/tables/saml_application_configs.sql

@@ -9,6 +9,8 @@ create table saml_application_configs (
   attribute_mapping jsonb /* @use SamlAttributeMapping */ not null default '{}'::jsonb,
   entity_id varchar(128),
   acs_url jsonb /* @use SamlAcsUrl */,
+  encryption jsonb /* @use SamlEncryption */,
+  name_id_format varchar(128) /* @use NameIdFormat */ not null,
   primary key (tenant_id, application_id),
   constraint saml_application_configs__application_type
     check (check_application_type(application_id, 'SAML'))