@logto/schemas 1.38.0 → 1.40.0

package/lib/types/logto-config/jwt-customizer.d.ts

@@ -10,14 +10,17 @@ export declare const jwtCustomizerGuard: z.ZodObject<{
     script: z.ZodString;
     environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     contextSample: z.ZodOptional<z.ZodRecord<z.ZodString, ZodType<import("@withtyped/server/lib/types.js").Json, z.ZodTypeDef, import("@withtyped/server/lib/types.js").Json>>>;
+    blockIssuanceOnError: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     script: string;
     environmentVariables?: Record<string, string> | undefined;
     contextSample?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+    blockIssuanceOnError?: boolean | undefined;
 }, {
     script: string;
     environmentVariables?: Record<string, string> | undefined;
     contextSample?: Record<string, import("@withtyped/server/lib/types.js").Json> | undefined;
+    blockIssuanceOnError?: boolean | undefined;
 }>;
 export declare enum LogtoJwtTokenKeyType {
     AccessToken = "access-token",
@@ -1187,6 +1190,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
         pageRules: {
             path: string;
         }[];
+        additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
         customDomains?: {
             status: import("../../foundations/index.js").DomainStatus;
             domain: string;
@@ -1215,6 +1219,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
         pageRules: {
             path: string;
         }[];
+        additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
         customDomains?: {
             status: import("../../foundations/index.js").DomainStatus;
             domain: string;
@@ -1239,6 +1244,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
     } | null>;
     customData: ZodType<import("@withtyped/server/lib/types.js").JsonObject, z.ZodTypeDef, import("@withtyped/server/lib/types.js").JsonObject>;
     isThirdParty: ZodType<boolean, z.ZodTypeDef, boolean>;
+    appLevelAccessControlEnabled: ZodType<boolean, z.ZodTypeDef, boolean>;
     createdAt: ZodType<number, z.ZodTypeDef, number>;
 }, "secret">, "strip", z.ZodTypeAny, {
     type: import("../../db-entries/custom-types.js").ApplicationType;
@@ -1252,6 +1258,7 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
     customClientMetadata: import("../../foundations/index.js").CustomClientMetadata;
     protectedAppMetadata: import("../../foundations/index.js").ProtectedAppMetadata | null;
     isThirdParty: boolean;
+    appLevelAccessControlEnabled: boolean;
 }, {
     type: import("../../db-entries/custom-types.js").ApplicationType;
     name: string;
@@ -1264,10 +1271,12 @@ export declare const jwtCustomizerApplicationContextGuard: z.ZodObject<Omit<{
     customClientMetadata: import("../../foundations/index.js").CustomClientMetadata;
     protectedAppMetadata: import("../../foundations/index.js").ProtectedAppMetadata | null;
     isThirdParty: boolean;
+    appLevelAccessControlEnabled: boolean;
 }>;
 export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
     script: z.ZodString;
     environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    blockIssuanceOnError: z.ZodOptional<z.ZodBoolean>;
 } & {
     tokenSample: z.ZodOptional<z.ZodObject<{
         accountId: z.ZodOptional<z.ZodString>;
@@ -2441,6 +2450,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2469,6 +2479,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2492,6 +2503,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null>>;
             isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            appLevelAccessControlEnabled: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
         }, "strip", z.ZodTypeAny, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -2520,6 +2532,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2543,6 +2556,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -2571,6 +2585,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2594,6 +2609,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         user: {
@@ -2692,6 +2708,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2715,6 +2732,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -2932,6 +2950,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -2955,6 +2974,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -3176,6 +3196,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3199,6 +3220,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -3320,6 +3342,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             signInContext?: Record<string, string> | undefined;
         } | undefined;
     } | undefined;
+    blockIssuanceOnError?: boolean | undefined;
     tokenSample?: {
         grantId?: string | undefined;
         sid?: string | undefined;
@@ -3433,6 +3456,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3456,6 +3480,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -3577,6 +3602,7 @@ export declare const accessTokenJwtCustomizerGuard: z.ZodObject<{
             signInContext?: Record<string, string> | undefined;
         } | undefined;
     } | undefined;
+    blockIssuanceOnError?: boolean | undefined;
     tokenSample?: {
         grantId?: string | undefined;
         sid?: string | undefined;
@@ -3595,6 +3621,7 @@ export type AccessTokenJwtCustomizer = z.infer<typeof accessTokenJwtCustomizerGu
 export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
     script: z.ZodString;
     environmentVariables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    blockIssuanceOnError: z.ZodOptional<z.ZodBoolean>;
 } & {
     tokenSample: z.ZodOptional<z.ZodObject<{
         kind: z.ZodOptional<z.ZodLiteral<"ClientCredentials">>;
@@ -3655,6 +3682,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3683,6 +3711,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3706,6 +3735,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null>>;
             isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            appLevelAccessControlEnabled: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
         }, "strip", z.ZodTypeAny, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -3734,6 +3764,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3757,6 +3788,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -3785,6 +3817,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3808,6 +3841,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         application?: {
@@ -3838,6 +3872,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3861,6 +3896,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     }, {
         application?: {
@@ -3891,6 +3927,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3914,6 +3951,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
@@ -3948,6 +3986,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -3971,8 +4010,10 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     } | undefined;
+    blockIssuanceOnError?: boolean | undefined;
     tokenSample?: {
         jti?: string | undefined;
         kind?: "ClientCredentials" | undefined;
@@ -4012,6 +4053,7 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -4035,8 +4077,10 @@ export declare const clientCredentialsJwtCustomizerGuard: z.ZodObject<{
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     } | undefined;
+    blockIssuanceOnError?: boolean | undefined;
     tokenSample?: {
         jti?: string | undefined;
         kind?: "ClientCredentials" | undefined;
@@ -5226,6 +5270,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5254,6 +5299,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5277,6 +5323,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null>>;
             isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            appLevelAccessControlEnabled: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
         }, "strip", z.ZodTypeAny, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -5305,6 +5352,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5328,6 +5376,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -5356,6 +5405,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5379,6 +5429,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         user: {
@@ -5477,6 +5528,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5500,6 +5552,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -5717,6 +5770,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5740,6 +5794,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -5975,6 +6030,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -5998,6 +6054,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -6233,6 +6290,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6256,6 +6314,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
         grant?: {
             type?: GrantType.TokenExchange | undefined;
@@ -6440,6 +6499,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6468,6 +6528,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6491,6 +6552,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null>>;
             isThirdParty: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
+            appLevelAccessControlEnabled: z.ZodOptional<ZodType<boolean, z.ZodTypeDef, boolean>>;
         }, "strip", z.ZodTypeAny, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -6519,6 +6581,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6542,6 +6605,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }, {
             type?: import("../../db-entries/custom-types.js").ApplicationType | undefined;
             name?: string | undefined;
@@ -6570,6 +6634,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6593,6 +6658,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         application?: {
@@ -6623,6 +6689,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6646,6 +6713,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     }, {
         application?: {
@@ -6676,6 +6744,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6699,6 +6768,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     }>;
     script: z.ZodString;
@@ -6741,6 +6811,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6764,6 +6835,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     };
     tokenType: LogtoJwtTokenKeyType.ClientCredentials;
@@ -6806,6 +6878,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 pageRules: {
                     path: string;
                 }[];
+                additionalScopes?: (import("@logto/core-kit").UserScope.CustomData | import("@logto/core-kit").UserScope.Identities | import("@logto/core-kit").UserScope.Roles | import("@logto/core-kit").UserScope.Organizations | import("@logto/core-kit").UserScope.OrganizationRoles)[] | undefined;
                 customDomains?: {
                     status: import("../../foundations/index.js").DomainStatus;
                     domain: string;
@@ -6829,6 +6902,7 @@ export declare const jwtCustomizerTestRequestBodyGuard: z.ZodDiscriminatedUnion<
                 }[] | undefined;
             } | null | undefined;
             isThirdParty?: boolean | undefined;
+            appLevelAccessControlEnabled?: boolean | undefined;
         } | undefined;
     };
     tokenType: LogtoJwtTokenKeyType.ClientCredentials;

package/lib/types/logto-config/jwt-customizer.js

@@ -20,6 +20,7 @@ export const jwtCustomizerGuard = z.object({
     script: z.string(),
     environmentVariables: z.record(z.string()).optional(),
     contextSample: jsonObjectGuard.optional(),
+    blockIssuanceOnError: z.boolean().optional(),
 });
 export var LogtoJwtTokenKeyType;
 (function (LogtoJwtTokenKeyType) {

package/lib/types/logto-config/jwt-customizer.test.js

@@ -1,9 +1,20 @@
 import { pick } from '@silverhand/essentials';
 import { describe, expect, it } from 'vitest';
 import { accessTokenJwtCustomizerGuard, clientCredentialsJwtCustomizerGuard, } from './jwt-customizer.js';
-const allFields = ['script', 'environmentVariables', 'contextSample', 'tokenSample'];
+const allFields = [
+    'script',
+    'environmentVariables',
+    'contextSample',
+    'tokenSample',
+    'blockIssuanceOnError',
+];
 const requiredFields = ['script'];
-const optionalFields = ['environmentVariables', 'contextSample', 'tokenSample'];
+const optionalFields = [
+    'environmentVariables',
+    'contextSample',
+    'tokenSample',
+    'blockIssuanceOnError',
+];
 const testClientCredentialsTokenPayload = {
     script: '',
     environmentVariables: {},
@@ -14,6 +25,7 @@ const testClientCredentialsTokenPayload = {
         },
     },
     tokenSample: {},
+    blockIssuanceOnError: false,
 };
 const testAccessTokenPayload = {
     ...testClientCredentialsTokenPayload,