@schemavaults/auth-common 0.12.1 → 0.12.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,3 +1,3 @@
1
1
  import { z } from "zod";
2
- export declare const audienceRefSchema: z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>;
3
- export declare const audienceSchema: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, "many">]>;
2
+ export declare const audienceRefSchema: z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>;
3
+ export declare const audienceSchema: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, "many">]>;
@@ -4,8 +4,8 @@ export declare const authorizationCodePOSTbody: z.ZodObject<{
4
4
  code: z.ZodEffects<z.ZodString, string, string>;
5
5
  challenge_time: z.ZodNumber;
6
6
  code_verifier: z.ZodEffects<z.ZodString, string, string>;
7
- audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, "many">]>;
8
- client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
7
+ audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, "many">]>;
8
+ client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
9
9
  grant_type: z.ZodLiteral<"authorization_code">;
10
10
  }, "strict", z.ZodTypeAny, {
11
11
  code: string;
@@ -23,8 +23,8 @@ export declare const authorizationCodePOSTbody: z.ZodObject<{
23
23
  grant_type: "authorization_code";
24
24
  }>;
25
25
  export declare const refreshTokenPOSTbody: z.ZodObject<{
26
- audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, "many">]>;
27
- client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
26
+ audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, "many">]>;
27
+ client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
28
28
  grant_type: z.ZodLiteral<"refresh_token">;
29
29
  replaceRefreshToo: z.ZodOptional<z.ZodBoolean>;
30
30
  }, "strict", z.ZodTypeAny, {
@@ -43,8 +43,8 @@ export declare const grantTypePOSTbodySchemaMap: {
43
43
  code: z.ZodEffects<z.ZodString, string, string>;
44
44
  challenge_time: z.ZodNumber;
45
45
  code_verifier: z.ZodEffects<z.ZodString, string, string>;
46
- audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, "many">]>;
47
- client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
46
+ audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, "many">]>;
47
+ client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
48
48
  grant_type: z.ZodLiteral<"authorization_code">;
49
49
  }, "strict", z.ZodTypeAny, {
50
50
  code: string;
@@ -62,8 +62,8 @@ export declare const grantTypePOSTbodySchemaMap: {
62
62
  grant_type: "authorization_code";
63
63
  }>;
64
64
  readonly refresh_token: z.ZodObject<{
65
- audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, "many">]>;
66
- client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
65
+ audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, "many">]>;
66
+ client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
67
67
  grant_type: z.ZodLiteral<"refresh_token">;
68
68
  replaceRefreshToo: z.ZodOptional<z.ZodBoolean>;
69
69
  }, "strict", z.ZodTypeAny, {
@@ -1,6 +1,6 @@
1
1
  import { z } from "zod";
2
2
  export declare const authorizeClientApplicationFormType: z.ZodEffects<z.ZodObject<{
3
- app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
3
+ app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
4
4
  }, "strict", z.ZodTypeAny, {
5
5
  app_id: string;
6
6
  }, {
@@ -3,7 +3,7 @@ export declare const totpCodeSchema: z.ZodString;
3
3
  export declare const recoveryCodeSchema: z.ZodString;
4
4
  export declare const mfaVerifyBodySchema: z.ZodObject<{
5
5
  challenge_id: z.ZodString;
6
- client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
6
+ client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
7
7
  proof: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
8
8
  type: z.ZodLiteral<"totp">;
9
9
  code: z.ZodString;
@@ -1,5 +1,5 @@
1
1
  export declare const defaultAuthMiddlewareRules: {
2
- readonly public: [[], ["auth", "logout"], ["auth", "authorize"], ["api", "auth", "token"], ["api", "auth", "logout"], ["api", "environment"], ["error"]];
2
+ readonly public: [[], ["auth", "logout"], ["auth", "authorize"], ["api", "auth", "token"], ["api", "auth", "logout"], ["api", "environment"], ["error"], ["auth", "error"]];
3
3
  readonly unauthed: [["auth", "login"], ["auth", "register"], ["auth", "forgot-password"]];
4
4
  readonly authed: [["account"], ["auth", "account"]];
5
5
  readonly admin: [["admin"]];
@@ -7,6 +7,7 @@ export const defaultAuthMiddlewareRules = {
7
7
  ["api", "auth", "logout"],
8
8
  ["api", "environment"], // allow frontend client to ask server what environment this is running in
9
9
  ["error"],
10
+ ["auth", "error"],
10
11
  ],
11
12
  unauthed: [
12
13
  ["auth", "login"],
@@ -1 +1 @@
1
- {"version":3,"file":"default-auth-middleware-rules.js","sourceRoot":"","sources":["../../src/middleware/default-auth-middleware-rules.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,MAAM,EAAE;QACN,EAAE,EAAE,0BAA0B;QAC9B,CAAC,MAAM,EAAE,QAAQ,CAAC;QAClB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QACxB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC;QACzB,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,0EAA0E;QAClG,CAAC,OAAO,CAAC;KACV;IACD,QAAQ,EAAE;QACR,CAAC,MAAM,EAAE,OAAO,CAAC;QACjB,CAAC,MAAM,EAAE,UAAU,CAAC;QACpB,CAAC,MAAM,EAAE,iBAAiB,CAAC;KAC5B;IACD,MAAM,EAAE;QACN,mDAAmD;QACnD,CAAC,SAAS,CAAC;QACX,CAAC,MAAM,EAAE,SAAS,CAAC;KACpB;IACD,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAClB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;CACc,CAAC"}
1
+ {"version":3,"file":"default-auth-middleware-rules.js","sourceRoot":"","sources":["../../src/middleware/default-auth-middleware-rules.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,MAAM,EAAE;QACN,EAAE,EAAE,0BAA0B;QAC9B,CAAC,MAAM,EAAE,QAAQ,CAAC;QAClB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QACxB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC;QACzB,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,0EAA0E;QAClG,CAAC,OAAO,CAAC;QACT,CAAC,MAAM,EAAE,OAAO,CAAC;KAClB;IACD,QAAQ,EAAE;QACR,CAAC,MAAM,EAAE,OAAO,CAAC;QACjB,CAAC,MAAM,EAAE,UAAU,CAAC;QACpB,CAAC,MAAM,EAAE,iBAAiB,CAAC;KAC5B;IACD,MAAM,EAAE;QACN,mDAAmD;QACnD,CAAC,SAAS,CAAC;QACX,CAAC,MAAM,EAAE,SAAS,CAAC;KACpB;IACD,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAClB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;CACc,CAAC"}
@@ -1,6 +1,6 @@
1
1
  import { z } from "zod";
2
2
  export declare const successfullyGeneratedTokensRecordSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
3
- access: z.ZodOptional<z.ZodRecord<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, z.ZodUnion<[z.ZodObject<{
3
+ access: z.ZodOptional<z.ZodRecord<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, z.ZodUnion<[z.ZodObject<{
4
4
  uid: z.ZodString;
5
5
  iat: z.ZodNumber;
6
6
  exp: z.ZodNumber;
@@ -189,11 +189,11 @@ export declare const requestTokensResultSchema: z.ZodUnion<[z.ZodObject<{
189
189
  error: true;
190
190
  }>, z.ZodObject<{
191
191
  message: z.ZodString;
192
- client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
192
+ client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
193
193
  success: z.ZodLiteral<true>;
194
194
  error: z.ZodLiteral<false>;
195
195
  tokens: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodObject<{
196
- access: z.ZodOptional<z.ZodRecord<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-registry", string>]>, z.ZodUnion<[z.ZodObject<{
196
+ access: z.ZodOptional<z.ZodRecord<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-registry" | "schemavaults-auth" | "schemavaults-mail", string>]>, z.ZodUnion<[z.ZodObject<{
197
197
  uid: z.ZodString;
198
198
  iat: z.ZodNumber;
199
199
  exp: z.ZodNumber;
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@schemavaults/auth-common",
3
3
  "description": "Types and utility functions for authentication and authorization",
4
- "version": "0.12.1",
4
+ "version": "0.12.3",
5
5
  "license": "UNLICENSED",
6
6
  "private": false,
7
7
  "repository": {
@@ -14,7 +14,7 @@
14
14
  "types": "dist/index.d.ts",
15
15
  "dependencies": {
16
16
  "zod": "3.25.8",
17
- "@schemavaults/app-definitions": "0.6.23",
17
+ "@schemavaults/app-definitions": "0.7.0",
18
18
  "crypto-js": "4.2.0"
19
19
  },
20
20
  "scripts": {