@logto/schemas 1.31.0 → 1.33.0

package/lib/types/user.d.ts

@@ -79,6 +79,7 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -105,6 +106,7 @@ export declare const userInfoGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -229,6 +231,7 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -255,6 +258,7 @@ export declare const userProfileResponseGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -437,6 +441,7 @@ export declare const featuredUserGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;
@@ -463,6 +468,7 @@ export declare const featuredUserGuard: z.ZodObject<Pick<{
         agent: string;
         name?: string | undefined;
         lastUsedAt?: string | undefined;
+        rpId?: string | undefined;
         transports?: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[] | undefined;
     } | {
         type: MfaFactor.BackupCode;

package/lib/types/verification-records/web-authn-verification.d.ts

@@ -9,6 +9,8 @@ export type WebAuthnVerificationRecordData = {
     verified: boolean;
     /** The challenge generated for the WebAuthn registration */
     registrationChallenge?: string;
+    /** The rpId used when generating the registration options */
+    registrationRpId?: string;
     /** The challenge generated for the WebAuthn authentication */
     authenticationChallenge?: string;
     registrationInfo?: BindWebAuthn;
@@ -19,9 +21,11 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
     userId: z.ZodString;
     verified: z.ZodBoolean;
     registrationChallenge: z.ZodOptional<z.ZodString>;
+    registrationRpId: z.ZodOptional<z.ZodString>;
     authenticationChallenge: z.ZodOptional<z.ZodString>;
     registrationInfo: z.ZodOptional<z.ZodObject<{
         type: z.ZodLiteral<import("../../index.js").MfaFactor.WebAuthn>;
+        rpId: z.ZodString;
         credentialId: z.ZodString;
         publicKey: z.ZodString;
         transports: z.ZodArray<z.ZodEnum<["usb", "nfc", "ble", "internal", "cable", "hybrid", "smart-card"]>, "many">;
@@ -30,6 +34,7 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -38,6 +43,7 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
         name?: string | undefined;
     }, {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -51,9 +57,11 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
     userId: string;
     verified: boolean;
     registrationChallenge?: string | undefined;
+    registrationRpId?: string | undefined;
     authenticationChallenge?: string | undefined;
     registrationInfo?: {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -67,9 +75,11 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
     userId: string;
     verified: boolean;
     registrationChallenge?: string | undefined;
+    registrationRpId?: string | undefined;
     authenticationChallenge?: string | undefined;
     registrationInfo?: {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -78,16 +88,18 @@ export declare const webAuthnVerificationRecordDataGuard: z.ZodObject<{
         name?: string | undefined;
     } | undefined;
 }>;
-export type SanitizedWebAuthnVerificationRecordData = Omit<WebAuthnVerificationRecordData, 'registrationInfo' | 'registrationChallenge' | 'authenticationChallenge'>;
+export type SanitizedWebAuthnVerificationRecordData = Omit<WebAuthnVerificationRecordData, 'registrationInfo' | 'registrationChallenge' | 'registrationRpId' | 'authenticationChallenge'>;
 export declare const sanitizedWebAuthnVerificationRecordDataGuard: z.ZodObject<Omit<{
     id: z.ZodString;
     type: z.ZodLiteral<VerificationType.WebAuthn>;
     userId: z.ZodString;
     verified: z.ZodBoolean;
     registrationChallenge: z.ZodOptional<z.ZodString>;
+    registrationRpId: z.ZodOptional<z.ZodString>;
     authenticationChallenge: z.ZodOptional<z.ZodString>;
     registrationInfo: z.ZodOptional<z.ZodObject<{
         type: z.ZodLiteral<import("../../index.js").MfaFactor.WebAuthn>;
+        rpId: z.ZodString;
         credentialId: z.ZodString;
         publicKey: z.ZodString;
         transports: z.ZodArray<z.ZodEnum<["usb", "nfc", "ble", "internal", "cable", "hybrid", "smart-card"]>, "many">;
@@ -96,6 +108,7 @@ export declare const sanitizedWebAuthnVerificationRecordDataGuard: z.ZodObject<O
         name: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -104,6 +117,7 @@ export declare const sanitizedWebAuthnVerificationRecordDataGuard: z.ZodObject<O
         name?: string | undefined;
     }, {
         type: import("../../index.js").MfaFactor.WebAuthn;
+        rpId: string;
         credentialId: string;
         publicKey: string;
         transports: ("usb" | "nfc" | "ble" | "internal" | "cable" | "hybrid" | "smart-card")[];
@@ -111,7 +125,7 @@ export declare const sanitizedWebAuthnVerificationRecordDataGuard: z.ZodObject<O
         agent: string;
         name?: string | undefined;
     }>>;
-}, "registrationChallenge" | "authenticationChallenge" | "registrationInfo">, "strip", z.ZodTypeAny, {
+}, "registrationChallenge" | "registrationRpId" | "authenticationChallenge" | "registrationInfo">, "strip", z.ZodTypeAny, {
     type: VerificationType.WebAuthn;
     id: string;
     userId: string;

package/lib/types/verification-records/web-authn-verification.js

@@ -7,11 +7,13 @@ export const webAuthnVerificationRecordDataGuard = z.object({
     userId: z.string(),
     verified: z.boolean(),
     registrationChallenge: z.string().optional(),
+    registrationRpId: z.string().optional(),
     authenticationChallenge: z.string().optional(),
     registrationInfo: bindWebAuthnGuard.optional(),
 });
 export const sanitizedWebAuthnVerificationRecordDataGuard = webAuthnVerificationRecordDataGuard.omit({
     registrationInfo: true,
     registrationChallenge: true,
+    registrationRpId: true,
     authenticationChallenge: true,
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/schemas",
-  "version": "1.31.0",
+  "version": "1.33.0",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "license": "MPL-2.0",
   "type": "module",
@@ -65,11 +65,11 @@
   "dependencies": {
     "@withtyped/server": "^0.14.0",
     "nanoid": "^5.0.9",
-    "@logto/connector-kit": "^4.5.0",
-    "@logto/core-kit": "^2.6.1",
     "@logto/language-kit": "^1.2.0",
-    "@logto/phrases": "^1.20.0",
-    "@logto/phrases-experience": "^1.11.0",
+    "@logto/core-kit": "^2.6.1",
+    "@logto/connector-kit": "^4.6.0",
+    "@logto/phrases": "^1.22.0",
+    "@logto/phrases-experience": "^1.12.0",
     "@logto/shared": "^3.3.0"
   },
   "peerDependencies": {

package/tables/application_sign_in_experiences.sql

@@ -8,6 +8,7 @@ create table application_sign_in_experiences (
     references applications (id) on update cascade on delete cascade,
   color jsonb /* @use PartialColor */ not null default '{}'::jsonb,
   branding jsonb /* @use Branding */ not null default '{}'::jsonb,
+  custom_css text,
   terms_of_use_url varchar(2048),
   privacy_policy_url varchar(2048),
   display_name varchar(256),

package/tables/applications.sql

@@ -26,6 +26,9 @@ create index applications__id
 create index applications__is_third_party
   on applications (tenant_id, is_third_party);
 
+create index applications__type
+  on applications (tenant_id, type);
+
 create unique index applications__protected_app_metadata_host
   on applications (
     (protected_app_metadata->>'host')

package/tables/daily_active_users.sql

@@ -11,3 +11,6 @@ create table daily_active_users (
 
 create index daily_active_users__id
   on daily_active_users (tenant_id, id);
+
+create index daily_active_users__date
+  on daily_active_users (tenant_id, date);

package/tables/organizations.sql

@@ -14,8 +14,12 @@ create table organizations (
   custom_data jsonb /* @use JsonObject */ not null default '{}'::jsonb,
   /** Whether multi-factor authentication configuration is required for the members of the organization. */
   is_mfa_required boolean not null default false,
+  /** The organization's branding color configuration. */
+  color jsonb /* @use PartialColor */ not null default '{}'::jsonb,
   /** The organization's branding configuration. */
   branding jsonb /* @use Branding */ not null default '{}'::jsonb,
+  /** The custom CSS of the organization. */
+  custom_css text,
   /** When the organization was created. */
   created_at timestamptz not null default(now()),
   primary key (id)

package/tables/roles.sql

@@ -19,6 +19,9 @@ create table roles (
 create index roles__id
   on roles (tenant_id, id);
 
+create index roles__type
+  on roles (tenant_id, type);
+
 create function public.check_role_type(role_id varchar(21), target_type role_type) returns boolean as
 $$ begin
   return (select type from public.roles where id = role_id) = target_type;

package/tables/sign_in_experiences.sql

@@ -7,6 +7,7 @@ create table sign_in_experiences (
   id varchar(21) not null,
   color jsonb /* @use Color */ not null,
   branding jsonb /* @use Branding */ not null,
+  hide_logto_branding boolean not null default false,
   language_info jsonb /* @use LanguageInfo */ not null,
   terms_of_use_url varchar(2048),
   privacy_policy_url varchar(2048),
@@ -29,6 +30,6 @@ create table sign_in_experiences (
   captcha_policy jsonb /* @use CaptchaPolicy */ not null default '{}'::jsonb,
   sentinel_policy jsonb /* @use SentinelPolicy */ not null default '{}'::jsonb,
   email_blocklist_policy jsonb /* @use EmailBlocklistPolicy */ not null default '{}'::jsonb,
-  forgot_password_methods jsonb /* @use ForgotPasswordMethods */,
+  forgot_password_methods jsonb /* @use ForgotPasswordMethods */ default '[]'::jsonb,
   primary key (tenant_id, id)
 );