@meistrari/auth-nuxt 3.24.0 → 3.26.0

package/README.md

@@ -4,11 +4,13 @@ A Nuxt module for authentication, organization management, and API key capabilit
 
 ## Auth Types
 
-This SDK supports two authentication models:
+This SDK supports two interactive authentication models:
 
 - **Application Authentication (recommended)**: Use this for product applications that need end-user authentication and authorization scoped to a specific application. See [Application Authentication Guide](./docs/APPLICATION_AUTH.md).
 - **First-Party Authentication**: Use this only for trusted first-party tools that interact directly with the Auth API in an administrative way, such as the Accounts Dashboard and Backoffice. See [First-Party Authentication Guide](./docs/FIRST_PARTY_AUTH.md).
 
+For machine-to-machine authentication, use `@meistrari/auth-core` directly on the server. See the [Client Credentials Guide](https://github.com/meistrari/auth-api/blob/main/packages/core/docs/CLIENT_CREDENTIALS.md).
+
 ## Installation
 
 ```bash

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/auth-nuxt",
   "configKey": "telaAuth",
-  "version": "3.24.0",
+  "version": "3.26.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/composables/admin.d.ts

@@ -1,4 +1,4 @@
-import type { AdminApplicationRecord, AdminApplicationEntitlementRecord, AdminEntitlementWithRules, AdminOrganization, AdminOrganizationSummary, AdminOrganizationTeamRecord, AdminUser, AdminUserAccess, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, GetAdminOrganizationOptions, GetAdminOrganizationsSummaryOptions, InviteAdminOrganizationUsersOptions, InviteAdminOrganizationUsersResult, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminUsersOptions, ListAdminUsersResult, AdminMember, RemoveAdminMemberOptions, ResendAdminInviteOptions, SetAdminEntitlementRulesOptions, SetAdminUserApplicationRoleOptions, SetAdminUserTeamOptions, UpdateAdminEntitlementOptions, UpdateAdminMemberRoleOptions, UpdateAdminOrganizationOptions } from '@meistrari/auth-core';
+import type { AdminApplicationRecord, AdminApplicationRole, AdminApplicationEntitlementRecord, AdminApplicationSecret, AdminEntitlementWithRules, AdminOrganization, AdminOrganizationSummary, AdminOrganizationTeamRecord, AdminUser, AdminUserAccess, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminApplicationRoleOptions, CreateAdminApplicationSecretOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, CreatedAdminApplicationSecret, GetAdminOrganizationOptions, GetAdminOrganizationsSummaryOptions, InviteAdminOrganizationUsersOptions, InviteAdminOrganizationUsersResult, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminUsersOptions, ListAdminUsersResult, AdminMember, RemoveAdminMemberOptions, ResendAdminInviteOptions, SetAdminEntitlementRulesOptions, SetAdminUserApplicationRoleOptions, SetAdminUserTeamOptions, UpdateAdminEntitlementOptions, UpdateAdminApplicationRoleOptions, UpdateAdminMemberRoleOptions, UpdateAdminOrganizationOptions } from '@meistrari/auth-core';
 export interface UseTelaAdminReturn {
     /**
      * Lists users as a global admin, optionally with organization previews
@@ -32,6 +32,14 @@ export interface UseTelaAdminReturn {
      * @returns The updated application
      */
     updateApplication: (applicationId: string, options: CreateAdminApplicationOptions) => Promise<AdminApplicationRecord>;
+    /** Lists application-scoped role definitions. */
+    listApplicationRoles: (applicationId: string) => Promise<AdminApplicationRole[]>;
+    /** Creates an application-scoped role definition. */
+    createApplicationRole: (applicationId: string, options: CreateAdminApplicationRoleOptions) => Promise<AdminApplicationRole>;
+    /** Updates an application-scoped role definition. */
+    updateApplicationRole: (applicationId: string, currentName: string, options: UpdateAdminApplicationRoleOptions) => Promise<AdminApplicationRole>;
+    /** Deletes an application-scoped role definition. */
+    deleteApplicationRole: (applicationId: string, name: string) => Promise<AdminApplicationRole>;
     /**
      * Enables an organization for an application as a global admin.
      * @param applicationId - ID of the application to update
@@ -39,6 +47,32 @@ export interface UseTelaAdminReturn {
      * @returns The created entitlement
      */
     createApplicationEntitlement: (applicationId: string, options: CreateAdminApplicationEntitlementOptions) => Promise<AdminApplicationEntitlementRecord>;
+    /**
+     * Lists client secrets for an application as a global admin.
+     * @param applicationId - ID of the application to inspect
+     * @returns Secret metadata without plaintext values
+     */
+    listApplicationSecrets: (applicationId: string) => Promise<AdminApplicationSecret[]>;
+    /**
+     * Creates a client secret for an application as a global admin.
+     * @param applicationId - ID of the application to update
+     * @param options - Optional secret display name
+     * @returns The created secret, including the plaintext value shown only once
+     */
+    createApplicationSecret: (applicationId: string, options?: CreateAdminApplicationSecretOptions) => Promise<CreatedAdminApplicationSecret>;
+    /**
+     * Deletes a client secret for an application as a global admin.
+     * @param applicationId - ID of the application to update
+     * @param secretId - ID of the secret to delete
+     * @returns The deleted secret metadata
+     */
+    deleteApplicationSecret: (applicationId: string, secretId: string) => Promise<AdminApplicationSecret>;
+    /**
+     * Retires an application's service-account identity as a global admin.
+     * @param applicationId - ID of the application to update
+     * @returns The updated application
+     */
+    retireApplicationServiceAccount: (applicationId: string) => Promise<AdminApplicationRecord>;
     /**
      * Fetches a single entitlement together with its ordered access rules.
      * @param entitlementId - ID of the entitlement to fetch

package/dist/runtime/composables/admin.js

@@ -18,9 +18,33 @@ export function useTelaAdmin() {
   async function updateApplication(applicationId, options) {
     return await authClient.admin.updateApplication(applicationId, options);
   }
+  async function listApplicationRoles(applicationId) {
+    return await authClient.admin.listApplicationRoles(applicationId);
+  }
+  async function createApplicationRole(applicationId, options) {
+    return await authClient.admin.createApplicationRole(applicationId, options);
+  }
+  async function updateApplicationRole(applicationId, currentName, options) {
+    return await authClient.admin.updateApplicationRole(applicationId, currentName, options);
+  }
+  async function deleteApplicationRole(applicationId, name) {
+    return await authClient.admin.deleteApplicationRole(applicationId, name);
+  }
   async function createApplicationEntitlement(applicationId, options) {
     return await authClient.admin.createApplicationEntitlement(applicationId, options);
   }
+  async function listApplicationSecrets(applicationId) {
+    return await authClient.admin.listApplicationSecrets(applicationId);
+  }
+  async function createApplicationSecret(applicationId, options) {
+    return await authClient.admin.createApplicationSecret(applicationId, options);
+  }
+  async function deleteApplicationSecret(applicationId, secretId) {
+    return await authClient.admin.deleteApplicationSecret(applicationId, secretId);
+  }
+  async function retireApplicationServiceAccount(applicationId) {
+    return await authClient.admin.retireApplicationServiceAccount(applicationId);
+  }
   async function listOrganizations(options) {
     return await authClient.admin.listOrganizations(options);
   }
@@ -96,7 +120,15 @@ export function useTelaAdmin() {
     listApplications,
     createApplication,
     updateApplication,
+    listApplicationRoles,
+    createApplicationRole,
+    updateApplicationRole,
+    deleteApplicationRole,
     createApplicationEntitlement,
+    listApplicationSecrets,
+    createApplicationSecret,
+    deleteApplicationSecret,
+    retireApplicationServiceAccount,
     getEntitlement,
     setEntitlementRules,
     updateEntitlement,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-nuxt",
-  "version": "3.24.0",
+  "version": "3.26.0",
   "type": "module",
   "exports": {
     ".": {
@@ -36,7 +36,7 @@
     "docs": "nuxt-module-build prepare && typedoc"
   },
   "dependencies": {
-    "@meistrari/auth-core": "1.34.0",
+    "@meistrari/auth-core": "1.36.0",
     "jose": "6.1.3"
   },
   "peerDependencies": {