@robelest/convex-auth 0.0.4-preview.27 → 0.0.4-preview.28

package/dist/component/_generated/component.d.ts

@@ -1309,6 +1309,17 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           expirationTime: number;
           userId: string;
         } | null, Name>;
+        sessionIssue: FunctionReference<"mutation", "internal", {
+          refreshTokenExpirationTime?: number;
+          replaceSessionId?: string;
+          sessionExpirationTime: number;
+          sessionId?: string;
+          userId: string;
+        }, {
+          refreshTokenId?: string;
+          sessionId: string;
+          userId: string;
+        }, Name>;
         sessionList: FunctionReference<"query", "internal", {
           cursor?: string | null;
           limit?: number;
@@ -1343,6 +1354,17 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
         refreshTokenDeleteAll: FunctionReference<"mutation", "internal", {
           sessionId: string;
         }, null, Name>;
+        refreshTokenExchange: FunctionReference<"mutation", "internal", {
+          now: number;
+          refreshTokenExpirationTime: number;
+          refreshTokenId: string;
+          reuseWindowMs: number;
+          sessionId: string;
+        }, {
+          refreshTokenId: string;
+          sessionId: string;
+          userId: string;
+        } | null, Name>;
         refreshTokenGetActive: FunctionReference<"query", "internal", {
           sessionId: string;
         }, {
@@ -1476,6 +1498,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       verifiers: {
         verifierCreate: FunctionReference<"mutation", "internal", {
           sessionId?: string;
+          signature?: string;
         }, string, Name>;
         verifierDelete: FunctionReference<"mutation", "internal", {
           verifierId: string;
@@ -1901,6 +1924,17 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
     refreshTokenDeleteAll: FunctionReference<"mutation", "internal", {
       sessionId: string;
     }, null, Name>;
+    refreshTokenExchange: FunctionReference<"mutation", "internal", {
+      now: number;
+      refreshTokenExpirationTime: number;
+      refreshTokenId: string;
+      reuseWindowMs: number;
+      sessionId: string;
+    }, {
+      refreshTokenId: string;
+      sessionId: string;
+      userId: string;
+    } | null, Name>;
     refreshTokenGetActive: FunctionReference<"query", "internal", {
       sessionId: string;
     }, {
@@ -2122,6 +2156,17 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       expirationTime: number;
       userId: string;
     } | null, Name>;
+    sessionIssue: FunctionReference<"mutation", "internal", {
+      refreshTokenExpirationTime?: number;
+      replaceSessionId?: string;
+      sessionExpirationTime: number;
+      sessionId?: string;
+      userId: string;
+    }, {
+      refreshTokenId?: string;
+      sessionId: string;
+      userId: string;
+    }, Name>;
     sessionList: FunctionReference<"query", "internal", {
       cursor?: string | null;
       limit?: number;
@@ -2762,6 +2807,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
     } | null, Name>;
     verifierCreate: FunctionReference<"mutation", "internal", {
       sessionId?: string;
+      signature?: string;
     }, string, Name>;
     verifierDelete: FunctionReference<"mutation", "internal", {
       verifierId: string;

package/dist/component/index.d.ts

@@ -1,4 +1,4 @@
-import { AuthProviderConfig, ConvexAuthConfig, ConvexCredentialsConfig, CorsConfig, DeviceProviderConfig, EmailConfig, EmailUserConfig, GenericDoc, GroupConnectionPolicy, GroupConnectionPolicyPatch, HttpKeyContext, KeyRecord, KeyScope, PhoneConfig, PhoneUserConfig, ScopeChecker } from "../server/types.js";
+import { AuthProviderConfig, ConvexAuthConfig, ConvexCredentialsConfig, CorsConfig, DeviceProviderConfig, EmailConfig, EmailUserConfig, GenericDoc, GroupConnectionPolicy, GroupConnectionPolicyPatch, HttpKeyContext, KeyScope, PhoneConfig, PhoneUserConfig, ScopeChecker } from "../server/types.js";
+import { AuthConfig, AuthContext, AuthContextConfig, InferAuth, OptionalAuthContext, UserDoc } from "../server/auth-context.js";
 import { HttpAuthContext, HttpAuthContextConfig, OptionalHttpAuthContext } from "../server/http.js";
-import { AuthApi, AuthConfig, AuthContext, AuthContextConfig, InferAuth, OptionalAuthContext, UserDoc, createAuth } from "../server/auth.js";
-export { type AuthApi, type AuthConfig, type AuthContext, type AuthContextConfig, type AuthProviderConfig, type ConvexAuthConfig, type ConvexCredentialsConfig, type CorsConfig, type DeviceProviderConfig, type EmailConfig, type EmailUserConfig, type GenericDoc, type GroupConnectionPolicy, type GroupConnectionPolicyPatch, type HttpAuthContext, type HttpAuthContextConfig, type HttpKeyContext, type InferAuth, type KeyRecord, type KeyScope, type OptionalAuthContext, type OptionalHttpAuthContext, type PhoneConfig, type PhoneUserConfig, type ScopeChecker, type UserDoc, createAuth };
+import { AuthApi, createAuth } from "../server/auth.js";

package/dist/component/model.d.ts

@@ -1,7 +1,7 @@
-import * as convex_values387 from "convex/values";
+import * as convex_values475 from "convex/values";
 
 //#region src/component/model.d.ts
-declare const vApiKeyDoc: convex_values387.VObject<{
+declare const vApiKeyDoc: convex_values475.VObject<{
   lastUsedAt?: number | undefined;
   expiresAt?: number | undefined;
   rateLimit?: {
@@ -16,7 +16,7 @@ declare const vApiKeyDoc: convex_values387.VObject<{
   _creationTime: number;
   name: string;
   revoked: boolean;
-  userId: convex_values387.GenericId<"User">;
+  userId: convex_values475.GenericId<"User">;
   prefix: string;
   hashedKey: string;
   scopes: {
@@ -24,43 +24,43 @@ declare const vApiKeyDoc: convex_values387.VObject<{
     actions: string[];
   }[];
   createdAt: number;
-  _id: convex_values387.GenericId<"ApiKey">;
+  _id: convex_values475.GenericId<"ApiKey">;
 }, {
-  userId: convex_values387.VId<convex_values387.GenericId<"User">, "required">;
-  prefix: convex_values387.VString<string, "required">;
-  hashedKey: convex_values387.VString<string, "required">;
-  name: convex_values387.VString<string, "required">;
-  scopes: convex_values387.VArray<{
+  userId: convex_values475.VId<convex_values475.GenericId<"User">, "required">;
+  prefix: convex_values475.VString<string, "required">;
+  hashedKey: convex_values475.VString<string, "required">;
+  name: convex_values475.VString<string, "required">;
+  scopes: convex_values475.VArray<{
     resource: string;
     actions: string[];
-  }[], convex_values387.VObject<{
+  }[], convex_values475.VObject<{
     resource: string;
     actions: string[];
   }, {
-    resource: convex_values387.VString<string, "required">;
-    actions: convex_values387.VArray<string[], convex_values387.VString<string, "required">, "required">;
+    resource: convex_values475.VString<string, "required">;
+    actions: convex_values475.VArray<string[], convex_values475.VString<string, "required">, "required">;
   }, "required", "resource" | "actions">, "required">;
-  rateLimit: convex_values387.VObject<{
+  rateLimit: convex_values475.VObject<{
     maxRequests: number;
     windowMs: number;
   } | undefined, {
-    maxRequests: convex_values387.VFloat64<number, "required">;
-    windowMs: convex_values387.VFloat64<number, "required">;
+    maxRequests: convex_values475.VFloat64<number, "required">;
+    windowMs: convex_values475.VFloat64<number, "required">;
   }, "optional", "maxRequests" | "windowMs">;
-  rateLimitState: convex_values387.VObject<{
+  rateLimitState: convex_values475.VObject<{
     attemptsLeft: number;
     lastAttemptTime: number;
   } | undefined, {
-    attemptsLeft: convex_values387.VFloat64<number, "required">;
-    lastAttemptTime: convex_values387.VFloat64<number, "required">;
+    attemptsLeft: convex_values475.VFloat64<number, "required">;
+    lastAttemptTime: convex_values475.VFloat64<number, "required">;
   }, "optional", "attemptsLeft" | "lastAttemptTime">;
-  expiresAt: convex_values387.VFloat64<number | undefined, "optional">;
-  lastUsedAt: convex_values387.VFloat64<number | undefined, "optional">;
-  createdAt: convex_values387.VFloat64<number, "required">;
-  revoked: convex_values387.VBoolean<boolean, "required">;
-  metadata: convex_values387.VAny<any, "optional", string>;
-  _id: convex_values387.VId<convex_values387.GenericId<"ApiKey">, "required">;
-  _creationTime: convex_values387.VFloat64<number, "required">;
+  expiresAt: convex_values475.VFloat64<number | undefined, "optional">;
+  lastUsedAt: convex_values475.VFloat64<number | undefined, "optional">;
+  createdAt: convex_values475.VFloat64<number, "required">;
+  revoked: convex_values475.VBoolean<boolean, "required">;
+  metadata: convex_values475.VAny<any, "optional", string>;
+  _id: convex_values475.VId<convex_values475.GenericId<"ApiKey">, "required">;
+  _creationTime: convex_values475.VFloat64<number, "required">;
 }, "required", "_creationTime" | "name" | "revoked" | "lastUsedAt" | "expiresAt" | "userId" | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "createdAt" | "metadata" | "_id" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | `metadata.${string}`>;
 //#endregion
 export { vApiKeyDoc };

package/dist/component/public/identity/sessions.js

@@ -99,6 +99,43 @@ const sessionCreate = mutation({
 		});
 	}
 });
+const sessionIssue = mutation({
+	args: {
+		userId: v.id("User"),
+		sessionId: v.optional(v.id("Session")),
+		replaceSessionId: v.optional(v.id("Session")),
+		sessionExpirationTime: v.number(),
+		refreshTokenExpirationTime: v.optional(v.number())
+	},
+	returns: v.object({
+		userId: v.id("User"),
+		sessionId: v.id("Session"),
+		refreshTokenId: v.optional(v.id("RefreshToken"))
+	}),
+	handler: async (ctx, args) => {
+		let sessionId = args.sessionId;
+		if (sessionId === void 0) {
+			if (args.replaceSessionId !== void 0) {
+				if (await ctx.db.get("Session", args.replaceSessionId) !== null) await ctx.db.delete("Session", args.replaceSessionId);
+				const existingTokens = await ctx.db.query("RefreshToken").withIndex("session_id", (q) => q.eq("sessionId", args.replaceSessionId)).collect();
+				await Promise.all(existingTokens.map((token) => ctx.db.delete("RefreshToken", token._id)));
+			}
+			sessionId = await ctx.db.insert("Session", {
+				userId: args.userId,
+				expirationTime: args.sessionExpirationTime
+			});
+		}
+		const refreshTokenId = args.refreshTokenExpirationTime === void 0 ? void 0 : await ctx.db.insert("RefreshToken", {
+			sessionId,
+			expirationTime: args.refreshTokenExpirationTime
+		});
+		return {
+			userId: args.userId,
+			sessionId,
+			...refreshTokenId === void 0 ? {} : { refreshTokenId }
+		};
+	}
+});
 /**
 * Retrieve a single session by its Convex document ID.
 *
@@ -188,5 +225,5 @@ const sessionListByUser = query({
 });
 
 //#endregion
-export { sessionCreate, sessionDelete, sessionGetById, sessionList, sessionListByUser };
+export { sessionCreate, sessionDelete, sessionGetById, sessionIssue, sessionList, sessionListByUser };
 //# sourceMappingURL=sessions.js.map

package/dist/component/public/identity/tokens.js

@@ -159,7 +159,7 @@ const refreshTokenListBySession = query({
 	args: { sessionId: v.id("Session") },
 	returns: v.array(vRefreshTokenDoc),
 	handler: async (ctx, { sessionId }) => {
-		return await ctx.db.query("RefreshToken").withIndex("session_id_parent_refresh_token_id", (q) => q.eq("sessionId", sessionId)).collect();
+		return await ctx.db.query("RefreshToken").withIndex("session_id", (q) => q.eq("sessionId", sessionId)).collect();
 	}
 });
 /**
@@ -186,11 +186,89 @@ const refreshTokenDeleteAll = mutation({
 	args: { sessionId: v.id("Session") },
 	returns: v.null(),
 	handler: async (ctx, { sessionId }) => {
-		const tokens = await ctx.db.query("RefreshToken").withIndex("session_id_parent_refresh_token_id", (q) => q.eq("sessionId", sessionId)).collect();
+		const tokens = await ctx.db.query("RefreshToken").withIndex("session_id", (q) => q.eq("sessionId", sessionId)).collect();
 		await Promise.all(tokens.map((token) => ctx.db.delete("RefreshToken", token._id)));
 		return null;
 	}
 });
+const refreshSessionExchangeResult = v.union(v.object({
+	userId: v.id("User"),
+	sessionId: v.id("Session"),
+	refreshTokenId: v.id("RefreshToken")
+}), v.null());
+const refreshTokenExchange = mutation({
+	args: {
+		refreshTokenId: v.id("RefreshToken"),
+		sessionId: v.id("Session"),
+		now: v.number(),
+		refreshTokenExpirationTime: v.number(),
+		reuseWindowMs: v.number()
+	},
+	returns: refreshSessionExchangeResult,
+	handler: async (ctx, args) => {
+		const cleanupSessionArtifacts = async () => {
+			if (await ctx.db.get("Session", args.sessionId) !== null) await ctx.db.delete("Session", args.sessionId);
+			const tokens = await ctx.db.query("RefreshToken").withIndex("session_id", (q) => q.eq("sessionId", args.sessionId)).collect();
+			await Promise.all(tokens.map((token) => ctx.db.delete("RefreshToken", token._id)));
+		};
+		const refreshTokenDoc = await ctx.db.get("RefreshToken", args.refreshTokenId);
+		if (refreshTokenDoc === null || refreshTokenDoc.expirationTime < args.now || refreshTokenDoc.sessionId !== args.sessionId) {
+			await cleanupSessionArtifacts();
+			return null;
+		}
+		const session = await ctx.db.get("Session", args.sessionId);
+		if (session === null || session.expirationTime < args.now) {
+			await cleanupSessionArtifacts();
+			return null;
+		}
+		const issueRefreshToken = () => ctx.db.insert("RefreshToken", {
+			sessionId: args.sessionId,
+			expirationTime: args.refreshTokenExpirationTime,
+			parentRefreshTokenId: args.refreshTokenId
+		});
+		if (refreshTokenDoc.firstUsedTime === void 0) {
+			await ctx.db.patch("RefreshToken", args.refreshTokenId, { firstUsedTime: args.now });
+			const refreshTokenId = await issueRefreshToken();
+			return {
+				userId: session.userId,
+				sessionId: args.sessionId,
+				refreshTokenId
+			};
+		}
+		const activeRefreshToken = await ctx.db.query("RefreshToken").withIndex("session_id_first_used", (q) => q.eq("sessionId", args.sessionId).eq("firstUsedTime", void 0)).order("desc").first();
+		if (activeRefreshToken !== null && activeRefreshToken.parentRefreshTokenId === args.refreshTokenId) return {
+			userId: session.userId,
+			sessionId: args.sessionId,
+			refreshTokenId: activeRefreshToken._id
+		};
+		if (refreshTokenDoc.firstUsedTime + args.reuseWindowMs > args.now) {
+			const refreshTokenId = await issueRefreshToken();
+			return {
+				userId: session.userId,
+				sessionId: args.sessionId,
+				refreshTokenId
+			};
+		}
+		const tokensToInvalidate = [refreshTokenDoc];
+		const visited = new Set([refreshTokenDoc._id]);
+		let frontier = [refreshTokenDoc._id];
+		while (frontier.length > 0) {
+			const nextFrontier = [];
+			for (const parentRefreshTokenId of frontier) {
+				const children = await ctx.db.query("RefreshToken").withIndex("session_id_parent_refresh_token_id", (q) => q.eq("sessionId", args.sessionId).eq("parentRefreshTokenId", parentRefreshTokenId)).collect();
+				for (const child of children) {
+					if (visited.has(child._id)) continue;
+					visited.add(child._id);
+					tokensToInvalidate.push(child);
+					nextFrontier.push(child._id);
+				}
+			}
+			frontier = nextFrontier;
+		}
+		await Promise.all(tokensToInvalidate.filter((token) => token.firstUsedTime === void 0 || token.firstUsedTime > args.now - args.reuseWindowMs).map((token) => ctx.db.patch("RefreshToken", token._id, { firstUsedTime: args.now - args.reuseWindowMs })));
+		return null;
+	}
+});
 /**
 * Get the active (unused) refresh token for a session.
 *
@@ -223,5 +301,5 @@ const refreshTokenGetActive = query({
 });
 
 //#endregion
-export { refreshTokenCreate, refreshTokenDeleteAll, refreshTokenGetActive, refreshTokenGetById, refreshTokenGetChildren, refreshTokenListBySession, refreshTokenPatch };
+export { refreshTokenCreate, refreshTokenDeleteAll, refreshTokenExchange, refreshTokenGetActive, refreshTokenGetById, refreshTokenGetChildren, refreshTokenListBySession, refreshTokenPatch };
 //# sourceMappingURL=tokens.js.map

package/dist/component/public/identity/verifiers.js

@@ -24,10 +24,16 @@ import { v } from "convex/values";
 * ```
 */
 const verifierCreate = mutation({
-	args: { sessionId: v.optional(v.id("Session")) },
+	args: {
+		sessionId: v.optional(v.id("Session")),
+		signature: v.optional(v.string())
+	},
 	returns: v.id("AuthVerifier"),
-	handler: async (ctx, { sessionId }) => {
-		return await ctx.db.insert("AuthVerifier", { sessionId });
+	handler: async (ctx, { sessionId, signature }) => {
+		return await ctx.db.insert("AuthVerifier", {
+			sessionId,
+			signature
+		});
 	}
 });
 /**

package/dist/component/public.js

@@ -12,11 +12,11 @@ import { memberAdd, memberGet, memberGetByGroupAndUser, memberList, memberRemove
 import { keyDelete, keyGetByHashedKey, keyGetById, keyInsert, keyList, keyPatch } from "./public/security/keys.js";
 import { passkeyDelete, passkeyGetByCredentialId, passkeyInsert, passkeyListByUserId, passkeyUpdateCounter, passkeyUpdateMeta } from "./public/factors/passkeys.js";
 import { rateLimitCreate, rateLimitDelete, rateLimitGet, rateLimitPatch } from "./public/security/limits.js";
-import { refreshTokenCreate, refreshTokenDeleteAll, refreshTokenGetActive, refreshTokenGetById, refreshTokenGetChildren, refreshTokenListBySession, refreshTokenPatch } from "./public/identity/tokens.js";
-import { sessionCreate, sessionDelete, sessionGetById, sessionList, sessionListByUser } from "./public/identity/sessions.js";
+import { refreshTokenCreate, refreshTokenDeleteAll, refreshTokenExchange, refreshTokenGetActive, refreshTokenGetById, refreshTokenGetChildren, refreshTokenListBySession, refreshTokenPatch } from "./public/identity/tokens.js";
+import { sessionCreate, sessionDelete, sessionGetById, sessionIssue, sessionList, sessionListByUser } from "./public/identity/sessions.js";
 import { totpDelete, totpGetById, totpGetVerifiedByUserId, totpInsert, totpListByUserId, totpMarkVerified, totpUpdateLastUsed } from "./public/factors/totp.js";
 import { userDelete, userFindByVerifiedEmail, userFindByVerifiedPhone, userGetById, userInsert, userList, userPatch, userUpsert } from "./public/identity/users.js";
 import { verificationCodeCreate, verificationCodeDelete, verificationCodeGetByAccountId, verificationCodeGetByCode } from "./public/identity/codes.js";
 import { verifierCreate, verifierDelete, verifierGetById, verifierGetBySignature, verifierPatch } from "./public/identity/verifiers.js";
 
-export { accountDelete, accountGet, accountGetById, accountInsert, accountListByUser, accountPatch, deviceAuthorize, deviceDelete, deviceGetByCodeHash, deviceGetByUserCode, deviceInsert, deviceUpdateLastPolled, groupAuditEventCreate, groupAuditEventList, groupConnectionCreate, groupConnectionDelete, groupConnectionDomainAdd, groupConnectionDomainDelete, groupConnectionDomainList, groupConnectionDomainVerificationDelete, groupConnectionDomainVerificationGet, groupConnectionDomainVerificationUpsert, groupConnectionDomainVerify, groupConnectionGet, groupConnectionGetByDomain, groupConnectionList, groupConnectionScimConfigGetByGroupConnection, groupConnectionScimConfigGetByTokenHash, groupConnectionScimConfigUpsert, groupConnectionScimIdentityDelete, groupConnectionScimIdentityGet, groupConnectionScimIdentityGetByGroupConnectionAndUser, groupConnectionScimIdentityGetByMappedGroup, groupConnectionScimIdentityGetByUser, groupConnectionScimIdentityListByGroupConnection, groupConnectionScimIdentityUpsert, groupConnectionSecretDelete, groupConnectionSecretGet, groupConnectionSecretUpsert, groupConnectionUpdate, groupCreate, groupDelete, groupGet, groupList, groupUpdate, groupWebhookDeliveryEnqueue, groupWebhookDeliveryList, groupWebhookDeliveryListReady, groupWebhookDeliveryPatch, groupWebhookEndpointCreate, groupWebhookEndpointGet, groupWebhookEndpointList, groupWebhookEndpointUpdate, inviteAccept, inviteAcceptByToken, inviteCreate, inviteGet, inviteGetByTokenHash, inviteList, inviteRevoke, keyDelete, keyGetByHashedKey, keyGetById, keyInsert, keyList, keyPatch, memberAdd, memberGet, memberGetByGroupAndUser, memberList, memberRemove, memberResolve, memberUpdate, passkeyDelete, passkeyGetByCredentialId, passkeyInsert, passkeyListByUserId, passkeyUpdateCounter, passkeyUpdateMeta, rateLimitCreate, rateLimitDelete, rateLimitGet, rateLimitPatch, refreshTokenCreate, refreshTokenDeleteAll, refreshTokenGetActive, refreshTokenGetById, refreshTokenGetChildren, refreshTokenListBySession, refreshTokenPatch, sessionCreate, sessionDelete, sessionGetById, sessionList, sessionListByUser, totpDelete, totpGetById, totpGetVerifiedByUserId, totpInsert, totpListByUserId, totpMarkVerified, totpUpdateLastUsed, userDelete, userFindByVerifiedEmail, userFindByVerifiedPhone, userGetById, userInsert, userList, userPatch, userUpsert, verificationCodeCreate, verificationCodeDelete, verificationCodeGetByAccountId, verificationCodeGetByCode, verifierCreate, verifierDelete, verifierGetById, verifierGetBySignature, verifierPatch };
+export { accountDelete, accountGet, accountGetById, accountInsert, accountListByUser, accountPatch, deviceAuthorize, deviceDelete, deviceGetByCodeHash, deviceGetByUserCode, deviceInsert, deviceUpdateLastPolled, groupAuditEventCreate, groupAuditEventList, groupConnectionCreate, groupConnectionDelete, groupConnectionDomainAdd, groupConnectionDomainDelete, groupConnectionDomainList, groupConnectionDomainVerificationDelete, groupConnectionDomainVerificationGet, groupConnectionDomainVerificationUpsert, groupConnectionDomainVerify, groupConnectionGet, groupConnectionGetByDomain, groupConnectionList, groupConnectionScimConfigGetByGroupConnection, groupConnectionScimConfigGetByTokenHash, groupConnectionScimConfigUpsert, groupConnectionScimIdentityDelete, groupConnectionScimIdentityGet, groupConnectionScimIdentityGetByGroupConnectionAndUser, groupConnectionScimIdentityGetByMappedGroup, groupConnectionScimIdentityGetByUser, groupConnectionScimIdentityListByGroupConnection, groupConnectionScimIdentityUpsert, groupConnectionSecretDelete, groupConnectionSecretGet, groupConnectionSecretUpsert, groupConnectionUpdate, groupCreate, groupDelete, groupGet, groupList, groupUpdate, groupWebhookDeliveryEnqueue, groupWebhookDeliveryList, groupWebhookDeliveryListReady, groupWebhookDeliveryPatch, groupWebhookEndpointCreate, groupWebhookEndpointGet, groupWebhookEndpointList, groupWebhookEndpointUpdate, inviteAccept, inviteAcceptByToken, inviteCreate, inviteGet, inviteGetByTokenHash, inviteList, inviteRevoke, keyDelete, keyGetByHashedKey, keyGetById, keyInsert, keyList, keyPatch, memberAdd, memberGet, memberGetByGroupAndUser, memberList, memberRemove, memberResolve, memberUpdate, passkeyDelete, passkeyGetByCredentialId, passkeyInsert, passkeyListByUserId, passkeyUpdateCounter, passkeyUpdateMeta, rateLimitCreate, rateLimitDelete, rateLimitGet, rateLimitPatch, refreshTokenCreate, refreshTokenDeleteAll, refreshTokenExchange, refreshTokenGetActive, refreshTokenGetById, refreshTokenGetChildren, refreshTokenListBySession, refreshTokenPatch, sessionCreate, sessionDelete, sessionGetById, sessionIssue, sessionList, sessionListByUser, totpDelete, totpGetById, totpGetVerifiedByUserId, totpInsert, totpListByUserId, totpMarkVerified, totpUpdateLastUsed, userDelete, userFindByVerifiedEmail, userFindByVerifiedPhone, userGetById, userInsert, userList, userPatch, userUpsert, verificationCodeCreate, verificationCodeDelete, verificationCodeGetByAccountId, verificationCodeGetByCode, verifierCreate, verifierDelete, verifierGetById, verifierGetBySignature, verifierPatch };