@logto/schemas 1.35.0 → 1.37.0

package/lib/types/logto-config/index.js

@@ -1,3 +1,4 @@
+import { extendedIdTokenClaims } from '@logto/core-kit';
 import { z } from 'zod';
 import { accessTokenJwtCustomizerGuard, clientCredentialsJwtCustomizerGuard, } from './jwt-customizer.js';
 export * from './oidc-provider.js';
@@ -84,17 +85,25 @@ export const cloudConnectionDataGuard = z.object({
     appSecret: z.string(),
     resource: z.string(),
 });
+/* --- ID Token Config --- */
+export const extendedIdTokenClaimsGuard = z.enum(extendedIdTokenClaims);
+export const idTokenConfigGuard = z.object({
+    enabledExtendedClaims: extendedIdTokenClaimsGuard.array().optional(),
+});
 export var LogtoTenantConfigKey;
 (function (LogtoTenantConfigKey) {
     LogtoTenantConfigKey["AdminConsole"] = "adminConsole";
     LogtoTenantConfigKey["CloudConnection"] = "cloudConnection";
     /** The URL to redirect when session not found in Sign-in Experience. */
     LogtoTenantConfigKey["SessionNotFoundRedirectUrl"] = "sessionNotFoundRedirectUrl";
+    /** ID token configuration for extended claims. */
+    LogtoTenantConfigKey["IdToken"] = "idToken";
 })(LogtoTenantConfigKey || (LogtoTenantConfigKey = {}));
 export const logtoTenantConfigGuard = Object.freeze({
     [LogtoTenantConfigKey.AdminConsole]: adminConsoleDataGuard,
     [LogtoTenantConfigKey.CloudConnection]: cloudConnectionDataGuard,
     [LogtoTenantConfigKey.SessionNotFoundRedirectUrl]: z.object({ url: z.string() }),
+    [LogtoTenantConfigKey.IdToken]: idTokenConfigGuard,
 });
 export const logtoConfigKeys = Object.freeze([
     ...Object.values(LogtoOidcConfigKey),