@logto/schemas 1.37.0 → 1.38.0

package/lib/types/consent.d.ts

@@ -158,6 +158,8 @@ export declare const publicApplicationGuard: z.ZodObject<Pick<{
         alwaysIssueRefreshToken?: boolean | undefined;
         rotateRefreshToken?: boolean | undefined;
         allowTokenExchange?: boolean | undefined;
+        isDeviceFlow?: boolean | undefined;
+        maxAllowedGrants?: number | undefined;
     }, z.ZodTypeDef, {
         corsAllowedOrigins?: string[] | undefined;
         idTokenTtl?: number | undefined;
@@ -167,6 +169,8 @@ export declare const publicApplicationGuard: z.ZodObject<Pick<{
         alwaysIssueRefreshToken?: boolean | undefined;
         rotateRefreshToken?: boolean | undefined;
         allowTokenExchange?: boolean | undefined;
+        isDeviceFlow?: boolean | undefined;
+        maxAllowedGrants?: number | undefined;
     }>;
     protectedAppMetadata: z.ZodType<{
         host: string;
@@ -477,6 +481,8 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
             alwaysIssueRefreshToken?: boolean | undefined;
             rotateRefreshToken?: boolean | undefined;
             allowTokenExchange?: boolean | undefined;
+            isDeviceFlow?: boolean | undefined;
+            maxAllowedGrants?: number | undefined;
         }, z.ZodTypeDef, {
             corsAllowedOrigins?: string[] | undefined;
             idTokenTtl?: number | undefined;
@@ -486,6 +492,8 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
             alwaysIssueRefreshToken?: boolean | undefined;
             rotateRefreshToken?: boolean | undefined;
             allowTokenExchange?: boolean | undefined;
+            isDeviceFlow?: boolean | undefined;
+            maxAllowedGrants?: number | undefined;
         }>;
         protectedAppMetadata: z.ZodType<{
             host: string;
@@ -900,7 +908,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
             description: string | null;
         }[];
     }>, "many">>;
-    redirectUri: z.ZodString;
+    redirectUri: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     application: {
         name: string;
@@ -915,7 +923,6 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
         termsOfUseUrl?: string | null | undefined;
         privacyPolicyUrl?: string | null | undefined;
     };
-    redirectUri: string;
     user: {
         name: string | null;
         id: string;
@@ -940,6 +947,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
             }[];
         }[] | undefined;
     }[] | undefined;
+    redirectUri?: string | undefined;
     missingResourceScopes?: {
         resource: {
             name: string;
@@ -967,7 +975,6 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
         termsOfUseUrl?: string | null | undefined;
         privacyPolicyUrl?: string | null | undefined;
     };
-    redirectUri: string;
     user: {
         name: string | null;
         id: string;
@@ -992,6 +999,7 @@ export declare const consentInfoResponseGuard: z.ZodObject<{
             }[];
         }[] | undefined;
     }[] | undefined;
+    redirectUri?: string | undefined;
     missingResourceScopes?: {
         resource: {
             name: string;

package/lib/types/consent.js

@@ -47,5 +47,6 @@ export const consentInfoResponseGuard = z.object({
     organizations: publicOrganizationGuard.array().optional(),
     missingOIDCScope: z.string().array().optional(),
     missingResourceScopes: missingResourceScopesGuard.array().optional(),
-    redirectUri: z.string(),
+    // Device flow consent does not require a redirect_uri.
+    redirectUri: z.string().optional(),
 });

package/lib/types/log/interaction.d.ts

@@ -9,9 +9,11 @@ export declare enum Field {
     Identifier = "Identifier",
     Profile = "Profile",
     BindMfa = "BindMfa",
+    /** @deprecated */
     Mfa = "Mfa",
     Verification = "Verification",
-    Captcha = "Captcha"
+    Captcha = "Captcha",
+    SignInPasskey = "SignInPasskey"
 }
 /** Method to verify the identifier */
 export declare enum Method {
@@ -73,4 +75,4 @@ export type DeprecatedInteractionLogKey = `${Prefix}.${InteractionEvent}.${Field
  *   - When {@link Method} is `VerificationCode`, {@link Action} can be `Create` (generate and send a code) or `Submit` (verify and submit to the identifiers);
  *   - Otherwise, {@link Action} is fixed to `Submit` (other methods can be verified on submitting).
  */
-export type LogKey = `${Prefix}.${Action.Create | Action.End}` | `${Prefix}.${Action.Create}.${Field.Captcha}` | `${Prefix}.${InteractionEvent}.${Action.Create | Action.Update | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Profile}.${Action.Update}` | `${Prefix}.${InteractionEvent}.${Field.BindMfa}.${MfaFactor}.${Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Verification}.${VerificationType}.${Action}` | `${Prefix}.${InteractionEvent}.${Field.Identifier}.${Action.Submit}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Verification}.IdpInitiatedSso.${Action.Create}` | DeprecatedInteractionLogKey;
+export type LogKey = `${Prefix}.${Action.Create | Action.End}` | `${Prefix}.${Action.Create}.${Field.Captcha}` | `${Prefix}.${InteractionEvent}.${Action.Create | Action.Update | Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Profile}.${Action.Update}` | `${Prefix}.${InteractionEvent}.${Field.BindMfa}.${MfaFactor}.${Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.SignInPasskey}.${Action.Submit}` | `${Prefix}.${InteractionEvent}.${Field.Verification}.${VerificationType}.${Action}` | `${Prefix}.${InteractionEvent}.${Field.Identifier}.${Action.Submit}` | `${Prefix}.${InteractionEvent.SignIn}.${Field.Verification}.IdpInitiatedSso.${Action.Create}` | DeprecatedInteractionLogKey;

package/lib/types/log/interaction.js

@@ -6,9 +6,11 @@ export var Field;
     Field["Identifier"] = "Identifier";
     Field["Profile"] = "Profile";
     Field["BindMfa"] = "BindMfa";
+    /** @deprecated */
     Field["Mfa"] = "Mfa";
     Field["Verification"] = "Verification";
     Field["Captcha"] = "Captcha";
+    Field["SignInPasskey"] = "SignInPasskey";
 })(Field || (Field = {}));
 /** Method to verify the identifier */
 export var Method;

package/lib/types/log/token.d.ts

@@ -1,7 +1,8 @@
 /** The type of a token event. */
 export declare enum Type {
     ExchangeTokenBy = "ExchangeTokenBy",
-    RevokeToken = "RevokeToken"
+    RevokeToken = "RevokeToken",
+    RevokeGrants = "RevokeGrants"
 }
 /** Available grant token types extracted from [oidc-provider](https://github.com/panva/node-oidc-provider/blob/564b1095ee869c89381d63dfdb5875c99f870f5f/lib/helpers/revoke.js#L13). */
 export declare enum TokenType {
@@ -18,6 +19,7 @@ export declare enum ExchangeByType {
     AuthorizationCode = "AuthorizationCode",
     RefreshToken = "RefreshToken",
     ClientCredentials = "ClientCredentials",
-    TokenExchange = "TokenExchange"
+    TokenExchange = "TokenExchange",
+    DeviceCode = "DeviceCode"
 }
-export type LogKey = `${Type.ExchangeTokenBy}.${ExchangeByType}` | `${Type.RevokeToken}`;
+export type LogKey = `${Type.ExchangeTokenBy}.${ExchangeByType}` | `${Type.RevokeToken}` | `${Type.RevokeGrants}`;

package/lib/types/log/token.js

@@ -3,6 +3,7 @@ export var Type;
 (function (Type) {
     Type["ExchangeTokenBy"] = "ExchangeTokenBy";
     Type["RevokeToken"] = "RevokeToken";
+    Type["RevokeGrants"] = "RevokeGrants";
 })(Type || (Type = {}));
 /** Available grant token types extracted from [oidc-provider](https://github.com/panva/node-oidc-provider/blob/564b1095ee869c89381d63dfdb5875c99f870f5f/lib/helpers/revoke.js#L13). */
 export var TokenType;
@@ -22,4 +23,5 @@ export var ExchangeByType;
     ExchangeByType["RefreshToken"] = "RefreshToken";
     ExchangeByType["ClientCredentials"] = "ClientCredentials";
     ExchangeByType["TokenExchange"] = "TokenExchange";
+    ExchangeByType["DeviceCode"] = "DeviceCode";
 })(ExchangeByType || (ExchangeByType = {}));