@logto/schemas 1.25.0 → 1.26.0

package/lib/types/interactions.d.ts

@@ -74,7 +74,12 @@ export declare const socialAuthorizationUrlPayloadGuard: z.ZodObject<{
 export type SocialVerificationCallbackPayload = {
     /** The callback data from the social connector. */
     connectorData: Record<string, unknown>;
-    /**  The verification ID returned from the authorization URI. Optional for Google one tap callback */
+    /**
+     * Verification ID is used to retrieve the verification record.
+     * Throws an error if the verification record is not found.
+     *
+     * Optional for Google one tap callback as it does not have a pre-created verification record.
+     **/
     verificationId?: string;
 };
 export declare const socialVerificationCallbackPayloadGuard: z.ZodObject<{
@@ -120,6 +125,13 @@ export declare const passwordVerificationPayloadGuard: z.ZodObject<{
 /** Payload type for `POST /api/experience/verification/totp/verify`. */
 export type TotpVerificationVerifyPayload = {
     code: string;
+    /**
+     * Required for verifying the newly created TOTP secret verification record in the session.
+     * (For new TOTP setup use only)
+     *
+     * If not provided, a new TOTP verification will be generated and validated against the user's existing TOTP secret in their profile.
+     * (For existing TOTP verification use only)
+     */
     verificationId?: string;
 };
 export declare const totpVerificationVerifyPayloadGuard: z.ZodObject<{
@@ -143,11 +155,48 @@ export declare const backupCodeVerificationVerifyPayloadGuard: z.ZodObject<{
 }, {
     code: string;
 }>;
+/** Payload type for `POST /api/experience/verification/one-time-token/verify` */
+export type OneTimeTokenVerificationVerifyPayload = {
+    /**
+     * The email address that the one-time token was sent to. Currently only email identifier is supported.
+     */
+    identifier: InteractionIdentifier<SignInIdentifier.Email>;
+    token: string;
+};
+export declare const oneTimeTokenVerificationVerifyPayloadGuard: z.ZodObject<{
+    identifier: z.ZodObject<{
+        type: z.ZodLiteral<SignInIdentifier.Email>;
+        value: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: SignInIdentifier.Email;
+        value: string;
+    }, {
+        type: SignInIdentifier.Email;
+        value: string;
+    }>;
+    token: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    identifier: {
+        type: SignInIdentifier.Email;
+        value: string;
+    };
+    token: string;
+}, {
+    identifier: {
+        type: SignInIdentifier.Email;
+        value: string;
+    };
+    token: string;
+}>;
 /** Payload type for `POST /api/experience/identification`. */
 export type IdentificationApiPayload = {
     /**
-     * The ID of the verification record that is used to identify the user.
-     * Optional for the register interaction event
+     * SignIn and ForgotPassword interaction events:
+     * Required to retrieve the verification record to validate the user's identity.
+     *
+     * Register interaction event:
+     *  - If provided, new user profiles will be appended to the registration session using the verified information from the verification record.
+     *  - If not provided, the user creation process will be triggered directly using the existing profile information in the current registration session.
      */
     verificationId?: string;
     /**
@@ -169,13 +218,17 @@ export declare const identificationApiPayloadGuard: z.ZodObject<{
 /** Payload type for `POST /api/experience`. */
 export type CreateExperienceApiPayload = {
     interactionEvent: InteractionEvent;
+    captchaToken?: string;
 };
 export declare const CreateExperienceApiPayloadGuard: z.ZodObject<{
     interactionEvent: z.ZodNativeEnum<typeof InteractionEvent>;
+    captchaToken: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     interactionEvent: InteractionEvent;
+    captchaToken?: string | undefined;
 }, {
     interactionEvent: InteractionEvent;
+    captchaToken?: string | undefined;
 }>;
 /** Payload type for `POST /api/experience/profile */
 export declare const updateProfileApiPayloadGuard: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{

package/lib/types/interactions.js

@@ -1,3 +1,4 @@
+/* eslint-disable max-lines */
 import { emailRegEx, phoneRegEx, usernameRegEx } from '@logto/core-kit';
 import { z } from 'zod';
 import { AdditionalIdentifier, MfaFactor, SignInIdentifier, jsonObjectGuard, webAuthnTransportGuard, } from '../foundations/index.js';
@@ -43,12 +44,20 @@ export const totpVerificationVerifyPayloadGuard = z.object({
 export const backupCodeVerificationVerifyPayloadGuard = z.object({
     code: z.string().min(1),
 });
+export const oneTimeTokenVerificationVerifyPayloadGuard = z.object({
+    identifier: z.object({
+        type: z.literal(SignInIdentifier.Email),
+        value: z.string().regex(emailRegEx),
+    }),
+    token: z.string().min(1),
+});
 export const identificationApiPayloadGuard = z.object({
     verificationId: z.string().optional(),
     linkSocialIdentity: z.boolean().optional(),
 });
 export const CreateExperienceApiPayloadGuard = z.object({
     interactionEvent: z.nativeEnum(InteractionEvent),
+    captchaToken: z.string().optional(),
 });
 /** Payload type for `POST /api/experience/profile */
 export const updateProfileApiPayloadGuard = z.discriminatedUnion('type', [
@@ -237,3 +246,4 @@ export const verifyMfaResultGuard = z.object({
     type: z.nativeEnum(MfaFactor),
     id: z.string(),
 });
+/* eslint-enable max-lines */

package/lib/types/logto-config/jwt-customizer.d.ts

@@ -1623,6 +1623,19 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
     environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     tokenType: z.ZodLiteral<LogtoJwtTokenKeyType.AccessToken>;
 }, "strip", z.ZodTypeAny, {
+    token: {
+        grantId?: string | undefined;
+        scope?: string | undefined;
+        accountId?: string | undefined;
+        expiresWithSession?: boolean | undefined;
+        gty?: string | undefined;
+        sessionUid?: string | undefined;
+        sid?: string | undefined;
+        kind?: "AccessToken" | undefined;
+        jti?: string | undefined;
+        aud?: string | string[] | undefined;
+        clientId?: string | undefined;
+    };
     context: {
         user: {
             name?: string | null | undefined;
@@ -1699,6 +1712,8 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
     };
     script: string;
     tokenType: LogtoJwtTokenKeyType.AccessToken;
+    environmentVariables?: Record<string, string> | undefined;
+}, {
     token: {
         grantId?: string | undefined;
         scope?: string | undefined;
@@ -1712,8 +1727,6 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
         aud?: string | string[] | undefined;
         clientId?: string | undefined;
     };
-    environmentVariables?: Record<string, string> | undefined;
-}, {
     context: {
         user: {
             name?: string | null | undefined;
@@ -1790,19 +1803,6 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
     };
     script: string;
     tokenType: LogtoJwtTokenKeyType.AccessToken;
-    token: {
-        grantId?: string | undefined;
-        scope?: string | undefined;
-        accountId?: string | undefined;
-        expiresWithSession?: boolean | undefined;
-        gty?: string | undefined;
-        sessionUid?: string | undefined;
-        sid?: string | undefined;
-        kind?: "AccessToken" | undefined;
-        jti?: string | undefined;
-        aud?: string | string[] | undefined;
-        clientId?: string | undefined;
-    };
     environmentVariables?: Record<string, string> | undefined;
 }>, z.ZodObject<{
     token: z.ZodObject<{
@@ -1828,8 +1828,6 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
     environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     tokenType: z.ZodLiteral<LogtoJwtTokenKeyType.ClientCredentials>;
 }, "strip", z.ZodTypeAny, {
-    script: string;
-    tokenType: LogtoJwtTokenKeyType.ClientCredentials;
     token: {
         scope?: string | undefined;
         kind?: "ClientCredentials" | undefined;
@@ -1837,10 +1835,10 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
         aud?: string | string[] | undefined;
         clientId?: string | undefined;
     };
-    environmentVariables?: Record<string, string> | undefined;
-}, {
     script: string;
     tokenType: LogtoJwtTokenKeyType.ClientCredentials;
+    environmentVariables?: Record<string, string> | undefined;
+}, {
     token: {
         scope?: string | undefined;
         kind?: "ClientCredentials" | undefined;
@@ -1848,6 +1846,8 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
         aud?: string | string[] | undefined;
         clientId?: string | undefined;
     };
+    script: string;
+    tokenType: LogtoJwtTokenKeyType.ClientCredentials;
     environmentVariables?: Record<string, string> | undefined;
 }>]>;
 export type JwtCustomizerTestRequestBody = z.infer<typeof jwtCustomizerTestRequestBodyGuard>;
@@ -1860,16 +1860,16 @@ export declare const customJwtFetcherGuard: z.ZodDiscriminatedUnion<"tokenType",
     tokenType: z.ZodLiteral<LogtoJwtTokenKeyType.AccessToken>;
     context: z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server/lib/types.js").Json, z.ZodTypeDef, import("@withtyped/server/lib/types.js").Json>>;
 }>, "strip", z.ZodTypeAny, {
+    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
     context: Record<string, import("@withtyped/server/lib/types.js").Json>;
     script: string;
     tokenType: LogtoJwtTokenKeyType.AccessToken;
-    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
     environmentVariables?: Record<string, string> | undefined;
 }, {
+    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
     context: Record<string, import("@withtyped/server/lib/types.js").Json>;
     script: string;
     tokenType: LogtoJwtTokenKeyType.AccessToken;
-    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
     environmentVariables?: Record<string, string> | undefined;
 }>, z.ZodObject<z.objectUtil.extendShape<z.objectUtil.extendShape<{
     script: z.ZodString;
@@ -1879,14 +1879,14 @@ export declare const customJwtFetcherGuard: z.ZodDiscriminatedUnion<"tokenType",
 }>, {
     tokenType: z.ZodLiteral<LogtoJwtTokenKeyType.ClientCredentials>;
 }>, "strip", z.ZodTypeAny, {
+    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
     script: string;
     tokenType: LogtoJwtTokenKeyType.ClientCredentials;
-    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
     environmentVariables?: Record<string, string> | undefined;
 }, {
+    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
     script: string;
     tokenType: LogtoJwtTokenKeyType.ClientCredentials;
-    token: Record<string, import("@withtyped/server/lib/types.js").Json>;
     environmentVariables?: Record<string, string> | undefined;
 }>]>;
 export type CustomJwtFetcher = z.infer<typeof customJwtFetcherGuard>;

package/lib/types/saml-application.d.ts

@@ -167,7 +167,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
     isThirdParty: z.ZodOptional<z.ZodType<boolean, z.ZodTypeDef, boolean>>;
     createdAt: z.ZodOptional<z.ZodType<number, z.ZodTypeDef, number>>;
 }, "type" | "name">>, "name" | "customData" | "description">, {
-    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>>>;
+    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>>;
     entityId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
     acsUrl: z.ZodOptional<z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>>;
     encryption: z.ZodOptional<z.ZodType<{
@@ -187,7 +187,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
     nameIdFormat: NameIdFormat;
     customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>> | undefined;
+    attributeMapping?: Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
     entityId?: string | null | undefined;
     acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
     encryption?: {
@@ -199,7 +199,7 @@ export declare const samlApplicationCreateGuard: z.ZodObject<z.objectUtil.extend
     name: string;
     customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>> | undefined;
+    attributeMapping?: Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
     entityId?: string | null | undefined;
     acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
     encryption?: {
@@ -292,7 +292,7 @@ export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendS
     type: z.ZodOptional<z.ZodType<import("../index.js").ApplicationType, z.ZodTypeDef, import("../index.js").ApplicationType>>;
     name: z.ZodOptional<z.ZodType<string, z.ZodTypeDef, string>>;
 }, "type" | "isThirdParty">, "name" | "customData" | "description">, {
-    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>>>;
+    attributeMapping: z.ZodOptional<z.ZodType<Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>>;
     entityId: z.ZodOptional<z.ZodType<string | null, z.ZodTypeDef, string | null>>;
     acsUrl: z.ZodOptional<z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>>;
     encryption: z.ZodOptional<z.ZodType<{
@@ -311,7 +311,7 @@ export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendS
     name?: string | undefined;
     customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>> | undefined;
+    attributeMapping?: Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
     entityId?: string | null | undefined;
     acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
     encryption?: {
@@ -324,7 +324,7 @@ export declare const samlApplicationPatchGuard: z.ZodObject<z.objectUtil.extendS
     name?: string | undefined;
     customData?: import("@withtyped/server/lib/types.js").JsonObject;
     description?: string | null;
-    attributeMapping?: Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>> | undefined;
+    attributeMapping?: Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>> | undefined;
     entityId?: string | null | undefined;
     acsUrl?: import("../foundations/index.js").SamlAcsUrl | null | undefined;
     encryption?: {
@@ -423,7 +423,7 @@ export declare const samlApplicationResponseGuard: z.ZodObject<z.objectUtil.exte
 }, "secret" | "oidcClientMetadata" | "customClientMetadata" | "protectedAppMetadata">, Pick<{
     applicationId: z.ZodType<string, z.ZodTypeDef, string>;
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
-    attributeMapping: z.ZodType<Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at" | "sub", string>>>;
+    attributeMapping: z.ZodType<Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>, z.ZodTypeDef, Partial<Record<"name" | "username" | "email" | "sub" | "nickname" | "profile" | "website" | "gender" | "birthdate" | "zoneinfo" | "locale" | "address" | "given_name" | "family_name" | "middle_name" | "preferred_username" | "picture" | "email_verified" | "phone_number" | "phone_number_verified" | "updated_at" | "roles" | "organizations" | "organization_data" | "organization_roles" | "custom_data" | "identities" | "sso_identities" | "created_at", string>>>;
     entityId: z.ZodType<string | null, z.ZodTypeDef, string | null>;
     acsUrl: z.ZodType<import("../foundations/index.js").SamlAcsUrl | null, z.ZodTypeDef, import("../foundations/index.js").SamlAcsUrl | null>;
     encryption: z.ZodType<{
@@ -533,8 +533,8 @@ export declare const samlApplicationSecretResponseGuard: z.ZodObject<z.objectUti
     id: string;
     createdAt: number;
     certificate: string;
-    expiresAt: number;
     active: boolean;
+    expiresAt: number;
     fingerprints: {
         sha256: {
             formatted: string;
@@ -545,8 +545,8 @@ export declare const samlApplicationSecretResponseGuard: z.ZodObject<z.objectUti
     id: string;
     createdAt: number;
     certificate: string;
-    expiresAt: number;
     active: boolean;
+    expiresAt: number;
     fingerprints: {
         sha256: {
             formatted: string;