@logto/schemas 1.30.1 → 1.32.0

package/lib/types/sign-in-experience.d.ts

@@ -12,7 +12,7 @@ type ForgotPassword = {
  * the need to load the full connector metadata that is not needed for rendering.
  */
 export type ExperienceSocialConnector = Omit<ConnectorMetadata, 'description' | 'configTemplate' | 'formItems' | 'readme' | 'customData'>;
-export type FullSignInExperience = SignInExperience & {
+export type FullSignInExperience = Omit<SignInExperience, 'forgotPasswordMethods'> & {
     socialConnectors: ExperienceSocialConnector[];
     ssoConnectors: SsoConnectorMetadata[];
     forgotPassword: ForgotPassword;
@@ -35,7 +35,7 @@ export type FullSignInExperience = SignInExperience & {
     };
     customProfileFields?: Readonly<CustomProfileField[]>;
 };
-export declare const fullSignInExperienceGuard: z.ZodObject<{
+export declare const fullSignInExperienceGuard: z.ZodObject<Omit<{
     tenantId: z.ZodType<string, z.ZodTypeDef, string>;
     id: z.ZodType<string, z.ZodTypeDef, string>;
     color: z.ZodType<{
@@ -137,7 +137,8 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
     }>;
     sentinelPolicy: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").SentinelPolicy, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").SentinelPolicy>;
     emailBlocklistPolicy: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").EmailBlocklistPolicy, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").EmailBlocklistPolicy>;
-} & {
+    forgotPasswordMethods: z.ZodType<import("../foundations/jsonb-types/sign-in-experience.js").ForgotPasswordMethod[] | null, z.ZodTypeDef, import("../foundations/jsonb-types/sign-in-experience.js").ForgotPasswordMethod[] | null>;
+}, "forgotPasswordMethods"> & {
     socialConnectors: z.ZodArray<z.ZodObject<Omit<{
         id: z.ZodString;
         target: z.ZodString;
@@ -679,13 +680,14 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         type: CaptchaType;
         siteKey: string;
     }>>;
-    customProfileFields: z.ZodOptional<z.ZodArray<import("../index.js").Guard<CustomProfileField>, "many">>;
+    customProfileFields: z.ZodArray<import("../index.js").Guard<CustomProfileField>, "many">;
 }, "strip", z.ZodTypeAny, {
     id: string;
     tenantId: string;
     mfa: import("../foundations/jsonb-types/sign-in-experience.js").Mfa;
     color: import("../foundations/jsonb-types/sign-in-experience.js").Color;
     branding: import("../foundations/jsonb-types/sign-in-experience.js").Branding;
+    customCss: string | null;
     termsOfUseUrl: string | null;
     privacyPolicyUrl: string | null;
     languageInfo: import("../foundations/jsonb-types/sign-in-experience.js").LanguageInfo;
@@ -695,7 +697,6 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
     socialSignIn: import("../foundations/jsonb-types/sign-in-experience.js").SocialSignIn;
     socialSignInConnectorTargets: import("../foundations/jsonb-types/sign-in-experience.js").ConnectorTargets;
     signInMode: import("../db-entries/custom-types.js").SignInMode;
-    customCss: string | null;
     customContent: import("../foundations/jsonb-types/sign-in-experience.js").CustomContent;
     customUiAssets: import("../foundations/jsonb-types/sign-in-experience.js").CustomUiAssets | null;
     passwordPolicy: import("../foundations/jsonb-types/logs.js").PartialPasswordPolicy;
@@ -858,6 +859,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         phone: boolean;
     };
     isDevelopmentTenant: boolean;
+    customProfileFields: CustomProfileField[];
     googleOneTap?: {
         connectorId: string;
         clientId: string;
@@ -870,13 +872,13 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         type: CaptchaType;
         siteKey: string;
     } | undefined;
-    customProfileFields?: CustomProfileField[] | undefined;
 }, {
     id: string;
     tenantId: string;
     mfa: import("../foundations/jsonb-types/sign-in-experience.js").Mfa;
     color: import("../foundations/jsonb-types/sign-in-experience.js").Color;
     branding: import("../foundations/jsonb-types/sign-in-experience.js").Branding;
+    customCss: string | null;
     termsOfUseUrl: string | null;
     privacyPolicyUrl: string | null;
     languageInfo: import("../foundations/jsonb-types/sign-in-experience.js").LanguageInfo;
@@ -886,7 +888,6 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
     socialSignIn: import("../foundations/jsonb-types/sign-in-experience.js").SocialSignIn;
     socialSignInConnectorTargets: import("../foundations/jsonb-types/sign-in-experience.js").ConnectorTargets;
     signInMode: import("../db-entries/custom-types.js").SignInMode;
-    customCss: string | null;
     customContent: import("../foundations/jsonb-types/sign-in-experience.js").CustomContent;
     customUiAssets: import("../foundations/jsonb-types/sign-in-experience.js").CustomUiAssets | null;
     passwordPolicy: import("../foundations/jsonb-types/logs.js").PartialPasswordPolicy;
@@ -1049,6 +1050,7 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         phone: boolean;
     };
     isDevelopmentTenant: boolean;
+    customProfileFields: CustomProfileField[];
     googleOneTap?: {
         connectorId: string;
         clientId: string;
@@ -1061,6 +1063,5 @@ export declare const fullSignInExperienceGuard: z.ZodObject<{
         type: CaptchaType;
         siteKey: string;
     } | undefined;
-    customProfileFields?: CustomProfileField[] | undefined;
 }>;
 export {};

package/lib/types/sign-in-experience.js

@@ -3,7 +3,9 @@ import { z } from 'zod';
 import { CustomProfileFields, SignInExperiences, } from '../db-entries/index.js';
 import { CaptchaType } from '../foundations/jsonb-types/index.js';
 import { ssoConnectorMetadataGuard } from './sso-connector.js';
-export const fullSignInExperienceGuard = SignInExperiences.guard.extend({
+export const fullSignInExperienceGuard = SignInExperiences.guard
+    .omit({ forgotPasswordMethods: true })
+    .extend({
     socialConnectors: connectorMetadataGuard
         .omit({
         description: true,
@@ -25,6 +27,5 @@ export const fullSignInExperienceGuard = SignInExperiences.guard.extend({
         siteKey: z.string(),
     })
         .optional(),
-    // @charles TODO: Remove `optional` before release
-    customProfileFields: CustomProfileFields.guard.array().optional(),
+    customProfileFields: CustomProfileFields.guard.array(),
 });

package/lib/types/ssr.d.ts

@@ -7,6 +7,7 @@ export type SsrData = {
     signInExperience: {
         appId?: string;
         organizationId?: string;
+        uiLocales?: string;
         data: FullSignInExperience;
     };
     phrases: {

package/lib/types/user.d.ts

@@ -79,6 +79,7 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -89,16 +90,6 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
             usedAt?: string | undefined;
         }[];
         lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.EmailVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.PhoneVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
     })[], z.ZodTypeDef, ({
         type: MfaFactor.TOTP;
         id: string;
@@ -115,6 +106,7 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -125,16 +117,6 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
             usedAt?: string | undefined;
         }[];
         lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.EmailVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.PhoneVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
     })[]>;
     isSuspended: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
@@ -249,6 +231,7 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -259,16 +242,6 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
             usedAt?: string | undefined;
         }[];
         lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.EmailVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.PhoneVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
     })[], z.ZodTypeDef, ({
         type: MfaFactor.TOTP;
         id: string;
@@ -285,6 +258,7 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -295,16 +269,6 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
             usedAt?: string | undefined;
         }[];
         lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.EmailVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.PhoneVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
     })[]>;
     isSuspended: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;
@@ -477,6 +441,7 @@ export declare const featuredUserGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -487,16 +452,6 @@ export declare const featuredUserGuard: z.ZodObject<Pick<{
             usedAt?: string | undefined;
         }[];
         lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.EmailVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.PhoneVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
     })[], z.ZodTypeDef, ({
         type: MfaFactor.TOTP;
         id: string;
@@ -513,6 +468,7 @@ export declare const featuredUserGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -523,16 +479,6 @@ export declare const featuredUserGuard: z.ZodObject<Pick<{
             usedAt?: string | undefined;
         }[];
         lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.EmailVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
-    } | {
-        type: MfaFactor.PhoneVerificationCode;
-        id: string;
-        createdAt: string;
-        lastUsedAt?: string | undefined;
     })[]>;
     isSuspended: z.ZodType<boolean, z.ZodTypeDef, boolean>;
     lastSignInAt: z.ZodType<number | null, z.ZodTypeDef, number | null>;

package/lib/types/verification-records/code-verification.d.ts

@@ -2,10 +2,12 @@ import { z } from 'zod';
 import { SignInIdentifier, TemplateType } from '../../foundations/index.js';
 import { type VerificationCodeIdentifier } from '../interactions.js';
 import { VerificationType } from './verification-type.js';
-export type CodeVerificationType = VerificationType.EmailVerificationCode | VerificationType.PhoneVerificationCode;
+export type CodeVerificationType = VerificationType.EmailVerificationCode | VerificationType.PhoneVerificationCode | VerificationType.MfaEmailVerificationCode | VerificationType.MfaPhoneVerificationCode;
 type SignInIdentifierTypeOf = {
     [VerificationType.EmailVerificationCode]: SignInIdentifier.Email;
     [VerificationType.PhoneVerificationCode]: SignInIdentifier.Phone;
+    [VerificationType.MfaEmailVerificationCode]: SignInIdentifier.Email;
+    [VerificationType.MfaPhoneVerificationCode]: SignInIdentifier.Phone;
 };
 export type VerificationCodeIdentifierOf<T extends CodeVerificationType> = VerificationCodeIdentifier<SignInIdentifierTypeOf[T]>;
 /** The JSON data type for the `CodeVerification` record */
@@ -86,4 +88,74 @@ export declare const phoneCodeVerificationRecordDataGuard: z.ZodObject<{
     templateType: TemplateType;
     verified: boolean;
 }>;
+export declare const mfaEmailCodeVerificationRecordDataGuard: z.ZodObject<{
+    id: z.ZodString;
+    templateType: z.ZodNativeEnum<typeof TemplateType>;
+    verified: z.ZodBoolean;
+} & {
+    type: z.ZodLiteral<VerificationType.MfaEmailVerificationCode>;
+    identifier: z.ZodObject<{
+        type: z.ZodLiteral<SignInIdentifier.Email>;
+        value: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type: SignInIdentifier.Email;
+    }, {
+        value: string;
+        type: SignInIdentifier.Email;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: VerificationType.MfaEmailVerificationCode;
+    id: string;
+    identifier: {
+        value: string;
+        type: SignInIdentifier.Email;
+    };
+    templateType: TemplateType;
+    verified: boolean;
+}, {
+    type: VerificationType.MfaEmailVerificationCode;
+    id: string;
+    identifier: {
+        value: string;
+        type: SignInIdentifier.Email;
+    };
+    templateType: TemplateType;
+    verified: boolean;
+}>;
+export declare const mfaPhoneCodeVerificationRecordDataGuard: z.ZodObject<{
+    id: z.ZodString;
+    templateType: z.ZodNativeEnum<typeof TemplateType>;
+    verified: z.ZodBoolean;
+} & {
+    type: z.ZodLiteral<VerificationType.MfaPhoneVerificationCode>;
+    identifier: z.ZodObject<{
+        type: z.ZodLiteral<SignInIdentifier.Phone>;
+        value: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        type: SignInIdentifier.Phone;
+    }, {
+        value: string;
+        type: SignInIdentifier.Phone;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: VerificationType.MfaPhoneVerificationCode;
+    id: string;
+    identifier: {
+        value: string;
+        type: SignInIdentifier.Phone;
+    };
+    templateType: TemplateType;
+    verified: boolean;
+}, {
+    type: VerificationType.MfaPhoneVerificationCode;
+    id: string;
+    identifier: {
+        value: string;
+        type: SignInIdentifier.Phone;
+    };
+    templateType: TemplateType;
+    verified: boolean;
+}>;
 export {};

package/lib/types/verification-records/code-verification.js

@@ -20,3 +20,17 @@ export const phoneCodeVerificationRecordDataGuard = basicCodeVerificationRecordD
         value: z.string(),
     }),
 });
+export const mfaEmailCodeVerificationRecordDataGuard = basicCodeVerificationRecordDataGuard.extend({
+    type: z.literal(VerificationType.MfaEmailVerificationCode),
+    identifier: z.object({
+        type: z.literal(SignInIdentifier.Email),
+        value: z.string(),
+    }),
+});
+export const mfaPhoneCodeVerificationRecordDataGuard = basicCodeVerificationRecordDataGuard.extend({
+    type: z.literal(VerificationType.MfaPhoneVerificationCode),
+    identifier: z.object({
+        type: z.literal(SignInIdentifier.Phone),
+        value: z.string(),
+    }),
+});

package/lib/types/verification-records/verification-type.d.ts

@@ -3,6 +3,8 @@ export declare enum VerificationType {
     Password = "Password",
     EmailVerificationCode = "EmailVerificationCode",
     PhoneVerificationCode = "PhoneVerificationCode",
+    MfaEmailVerificationCode = "MfaEmailVerificationCode",
+    MfaPhoneVerificationCode = "MfaPhoneVerificationCode",
     Social = "Social",
     EnterpriseSso = "EnterpriseSso",
     TOTP = "Totp",

package/lib/types/verification-records/verification-type.js

@@ -4,6 +4,8 @@ export var VerificationType;
     VerificationType["Password"] = "Password";
     VerificationType["EmailVerificationCode"] = "EmailVerificationCode";
     VerificationType["PhoneVerificationCode"] = "PhoneVerificationCode";
+    VerificationType["MfaEmailVerificationCode"] = "MfaEmailVerificationCode";
+    VerificationType["MfaPhoneVerificationCode"] = "MfaPhoneVerificationCode";
     VerificationType["Social"] = "Social";
     VerificationType["EnterpriseSso"] = "EnterpriseSso";
     VerificationType["TOTP"] = "Totp";

package/lib/types/verification-records/web-authn-verification.d.ts

@@ -9,6 +9,8 @@ export type WebAuthnVerificationRecordData = {
     verified: boolean;
     /** The challenge generated for the WebAuthn registration */
     registrationChallenge?: string;
+    /** The rpId used when generating the registration options */
+    registrationRpId?: string;
     /** The challenge generated for the WebAuthn authentication */
     authenticationChallenge?: string;
     registrationInfo?: BindWebAuthn;
@@ -19,9 +21,11 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
     userId: z.ZodString;
     verified: z.ZodBoolean;
     registrationChallenge: z.ZodOptional<z.ZodString>;
+    registrationRpId: z.ZodOptional<z.ZodString>;
     authenticationChallenge: z.ZodOptional<z.ZodString>;
     registrationInfo: z.ZodOptional<z.ZodObject<{
         type: z.ZodLiteral<import("../../index.js").MfaFactor.WebAuthn>;
+        rpId: z.ZodString;
         credentialId: z.ZodString;
         publicKey: z.ZodString;
         transports: z.ZodArray<z.ZodEnum<["usb", "nfc", "ble", "internal", "cable", "hybrid", "smart-card"]>, "many">;
@@ -30,6 +34,7 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -38,6 +43,7 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
         name?: string | undefined;
     }, {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -51,9 +57,11 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
     userId: string;
     verified: boolean;
     registrationChallenge?: string | undefined;
+    registrationRpId?: string | undefined;
     authenticationChallenge?: string | undefined;
     registrationInfo?: {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -67,9 +75,11 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
     userId: string;
     verified: boolean;
     registrationChallenge?: string | undefined;
+    registrationRpId?: string | undefined;
     authenticationChallenge?: string | undefined;
     registrationInfo?: {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -78,16 +88,18 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
         name?: string | undefined;
     } | undefined;
 }>;
-export type SanitizedWebAuthnVerificationRecordData = Omit<WebAuthnVerificationRecordData, 'registrationInfo' | 'registrationChallenge' | 'authenticationChallenge'>;
+export type SanitizedWebAuthnVerificationRecordData = Omit<WebAuthnVerificationRecordData, 'registrationInfo' | 'registrationChallenge' | 'registrationRpId' | 'authenticationChallenge'>;
 export declare const sanitizedWebAuthnVerificationRecordDataGuard: z.ZodObject<Omit<{
     id: z.ZodString;
     type: z.ZodLiteral<VerificationType.WebAuthn>;
     userId: z.ZodString;
     verified: z.ZodBoolean;
     registrationChallenge: z.ZodOptional<z.ZodString>;
+    registrationRpId: z.ZodOptional<z.ZodString>;
     authenticationChallenge: z.ZodOptional<z.ZodString>;
     registrationInfo: z.ZodOptional<z.ZodObject<{
         type: z.ZodLiteral<import("../../index.js").MfaFactor.WebAuthn>;
+        rpId: z.ZodString;
         credentialId: z.ZodString;
         publicKey: z.ZodString;
         transports: z.ZodArray<z.ZodEnum<["usb", "nfc", "ble", "internal", "cable", "hybrid", "smart-card"]>, "many">;
@@ -96,6 +108,7 @@ export declare const sanitizedWebAuthnVerificationRecordDataGuard: z.ZodObject<O
         name: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -104,6 +117,7 @@ export declare const sanitizedWebAuthnVerificationRecordDataGuard: z.ZodObject<O
         name?: string | undefined;
     }, {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -111,7 +125,7 @@ export declare const sanitizedWebAuthnVerificationRecordDataGuard: z.ZodObject<O
         agent: string;
         name?: string | undefined;
     }>>;
-}, "registrationChallenge" | "authenticationChallenge" | "registrationInfo">, "strip", z.ZodTypeAny, {
+}, "registrationChallenge" | "registrationRpId" | "authenticationChallenge" | "registrationInfo">, "strip", z.ZodTypeAny, {
     type: VerificationType.WebAuthn;
     id: string;
     userId: string;

package/lib/types/verification-records/web-authn-verification.js

@@ -7,11 +7,13 @@ export const webAuthnVerificationRecordDataGuard = z.object({
     userId: z.string(),
     verified: z.boolean(),
     registrationChallenge: z.string().optional(),
+    registrationRpId: z.string().optional(),
     authenticationChallenge: z.string().optional(),
     registrationInfo: bindWebAuthnGuard.optional(),
 });
 export const sanitizedWebAuthnVerificationRecordDataGuard = webAuthnVerificationRecordDataGuard.omit({
     registrationInfo: true,
     registrationChallenge: true,
+    registrationRpId: true,
     authenticationChallenge: true,
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/schemas",
-  "version": "1.30.1",
+  "version": "1.32.0",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "license": "MPL-2.0",
   "type": "module",
@@ -65,12 +65,12 @@
   "dependencies": {
     "@withtyped/server": "^0.14.0",
     "nanoid": "^5.0.9",
-    "@logto/connector-kit": "^4.4.0",
-    "@logto/language-kit": "^1.2.0",
-    "@logto/phrases-experience": "^1.10.1",
+    "@logto/core-kit": "^2.6.1",
+    "@logto/connector-kit": "^4.6.0",
+    "@logto/phrases-experience": "^1.12.0",
+    "@logto/phrases": "^1.21.0",
     "@logto/shared": "^3.3.0",
-    "@logto/phrases": "^1.19.0",
-    "@logto/core-kit": "^2.6.1"
+    "@logto/language-kit": "^1.2.0"
   },
   "peerDependencies": {
     "zod": "3.24.3"

package/tables/application_sign_in_experiences.sql

@@ -8,6 +8,7 @@ create table application_sign_in_experiences (
     references applications (id) on update cascade on delete cascade,
   color jsonb /* @use PartialColor */ not null default '{}'::jsonb,
   branding jsonb /* @use Branding */ not null default '{}'::jsonb,
+  custom_css text,
   terms_of_use_url varchar(2048),
   privacy_policy_url varchar(2048),
   display_name varchar(256),

package/tables/daily_active_users.sql

@@ -11,3 +11,6 @@ create table daily_active_users (
 
 create index daily_active_users__id
   on daily_active_users (tenant_id, id);
+
+create index daily_active_users__date
+  on daily_active_users (tenant_id, date);

package/tables/organizations.sql

@@ -14,8 +14,12 @@ create table organizations (
   custom_data jsonb /* @use JsonObject */ not null default '{}'::jsonb,
   /** Whether multi-factor authentication configuration is required for the members of the organization. */
   is_mfa_required boolean not null default false,
+  /** The organization's branding color configuration. */
+  color jsonb /* @use PartialColor */ not null default '{}'::jsonb,
   /** The organization's branding configuration. */
   branding jsonb /* @use Branding */ not null default '{}'::jsonb,
+  /** The custom CSS of the organization. */
+  custom_css text,
   /** When the organization was created. */
   created_at timestamptz not null default(now()),
   primary key (id)

package/tables/sign_in_experiences.sql

@@ -29,5 +29,6 @@ create table sign_in_experiences (
   captcha_policy jsonb /* @use CaptchaPolicy */ not null default '{}'::jsonb,
   sentinel_policy jsonb /* @use SentinelPolicy */ not null default '{}'::jsonb,
   email_blocklist_policy jsonb /* @use EmailBlocklistPolicy */ not null default '{}'::jsonb,
+  forgot_password_methods jsonb /* @use ForgotPasswordMethods */ default '[]'::jsonb,
   primary key (tenant_id, id)
 );