@seamless-auth/types 0.28.0 → 0.30.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +34 -0
- package/README.md +22 -1
- package/dist/index.d.ts +2 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -1
- package/dist/schemas/auth/auth.schema.d.ts +3 -0
- package/dist/schemas/auth/auth.schema.d.ts.map +1 -1
- package/dist/schemas/auth/auth.schema.js +2 -0
- package/dist/schemas/auth/auth.schema.js.map +1 -1
- package/dist/schemas/authEvent/schema.d.ts +43 -4
- package/dist/schemas/authEvent/schema.d.ts.map +1 -1
- package/dist/schemas/authEvent/schema.js +14 -1
- package/dist/schemas/authEvent/schema.js.map +1 -1
- package/dist/schemas/oauth/schema.d.ts +3 -0
- package/dist/schemas/oauth/schema.d.ts.map +1 -1
- package/dist/schemas/oauth/schema.js +8 -0
- package/dist/schemas/oauth/schema.js.map +1 -1
- package/dist/schemas/policy/schema.d.ts +555 -0
- package/dist/schemas/policy/schema.d.ts.map +1 -0
- package/dist/schemas/policy/schema.js +125 -0
- package/dist/schemas/policy/schema.js.map +1 -0
- package/dist/schemas/recovery/schema.d.ts +130 -0
- package/dist/schemas/recovery/schema.d.ts.map +1 -0
- package/dist/schemas/recovery/schema.js +81 -0
- package/dist/schemas/recovery/schema.js.map +1 -0
- package/dist/schemas/systemConfig/schema.d.ts +63 -2
- package/dist/schemas/systemConfig/schema.d.ts.map +1 -1
- package/dist/schemas/systemConfig/schema.js +51 -5
- package/dist/schemas/systemConfig/schema.js.map +1 -1
- package/package.json +4 -3
- package/src/index.ts +2 -0
- package/src/schemas/auth/auth.schema.ts +2 -0
- package/src/schemas/authEvent/schema.ts +14 -1
- package/src/schemas/oauth/schema.ts +8 -0
- package/src/schemas/policy/schema.ts +168 -0
- package/src/schemas/recovery/schema.ts +117 -0
- package/src/schemas/systemConfig/schema.ts +68 -5
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,39 @@
|
|
|
1
1
|
# @seamless-auth/types
|
|
2
2
|
|
|
3
|
+
## 0.30.0
|
|
4
|
+
|
|
5
|
+
### Minor Changes
|
|
6
|
+
|
|
7
|
+
- 9f1b524: Schemas for the v0.20 recovery and staged policy work in seamless-auth-api.
|
|
8
|
+
|
|
9
|
+
- Recovery codes: `RecoveryCodeSchema`, `RecoveryCodesStatusSchema`, `RecoveryCodesGeneratedSchema`, `RecoveryCodeRedeemRequestSchema`.
|
|
10
|
+
- Self-service account recovery: `AccountRecoveryStartRequestSchema`, `AccountRecoveryVerifyRequestSchema`, `AccountRecoveryStatusSchema`, `AccountRecoveryCancelRequestSchema` and friends.
|
|
11
|
+
- `RecoverySessionResponseSchema` for the restricted session a recovery issues (`recovery: true`, `nextStep: 'enroll_passkey'`). Session responses gain an optional `recovery` flag.
|
|
12
|
+
- Staged policy: `POLICY_KEYS`, `PolicyDocumentSchema`, `PolicyVersionSchema`, `PolicyDraftSchema`, `PolicyStateResponseSchema`, publish, rollback and versions schemas, and `PolicyDryRunRequestSchema` / `PolicyDryRunResponseSchema`.
|
|
13
|
+
- System config gains `recovery_codes` (on by default) and `account_recovery` (off by default, 24h delay, 1h to 30d), both patchable. `PublicSystemConfigResponseSchema` gains optional `recoveryCodes` and `accountRecovery`.
|
|
14
|
+
- New auth event types for recovery codes, account recovery, break-glass sign-in and policy changes.
|
|
15
|
+
|
|
16
|
+
All additions are optional or defaulted, so existing payloads still parse.
|
|
17
|
+
- 96136fc: OAuth provider config holds the rules the auth server enforces since 0.19.4 (GHSA-qx82-28gf-w744), so the dashboard and CLI refuse a bad provider before the API does.
|
|
18
|
+
|
|
19
|
+
- `clientSecretEnv` must be an env var name ending in `_CLIENT_SECRET` (new `OAuthClientSecretEnvSchema`).
|
|
20
|
+
- `authorizationUrl`, `tokenUrl`, `userInfoUrl` and `jwksUri` must use `http` or `https`. `z.url()` alone accepted any scheme, including `javascript:`. The server still requires `https` in production.
|
|
21
|
+
|
|
22
|
+
Breaking for a stored provider that names another env var or uses another scheme: it now fails `OAuthProviderConfigSchema`, as it already fails on API 0.19.4.
|
|
23
|
+
|
|
24
|
+
## 0.29.0
|
|
25
|
+
|
|
26
|
+
### Minor Changes
|
|
27
|
+
|
|
28
|
+
- c386361: Add `binding` to the OAuth start response and the callback request. The auth server returns a
|
|
29
|
+
random `binding` from `/oauth/:providerId/start` and checks it on `/oauth/:providerId/callback`,
|
|
30
|
+
so a `state` can only be finished by the client that started the sign-in. Both fields are
|
|
31
|
+
optional in the schemas so a client can still parse a response from an older auth server.
|
|
32
|
+
|
|
33
|
+
### Patch Changes
|
|
34
|
+
|
|
35
|
+
- 14077a9: Raise the `zod` dependency floor from `^4.3.6` to `^4.5.0`. The published declarations use the two-argument `ZodPreprocess` type, which zod 4.3.x does not export and zod 4.4.x declares with a single type parameter, so a consumer resolving zod below 4.5.0 with `skipLibCheck: false` got TS2724 or TS2707 from this package's `.d.ts` files. Consumers pinned to zod 4.4.x or older should upgrade to zod 4.5.0 or later.
|
|
36
|
+
|
|
3
37
|
## 0.28.0
|
|
4
38
|
|
|
5
39
|
### Minor Changes
|
package/README.md
CHANGED
|
@@ -19,6 +19,23 @@ contracts built on top of them. Every layer of the stack validates against the s
|
|
|
19
19
|
Because everything downstream imports these contracts, a change here is treated as
|
|
20
20
|
breaking by default. See [Versioning and stability](#versioning-and-stability).
|
|
21
21
|
|
|
22
|
+
## Start here
|
|
23
|
+
|
|
24
|
+
New to Seamless Auth? The [self-hosted quickstart](https://docs.seamlessauth.com/start/quickstart/) runs the full stack locally with Docker. If Seamless hosts your auth instance, follow the [managed quickstart](https://docs.seamlessauth.com/start/managed-quickstart/) instead.
|
|
25
|
+
|
|
26
|
+
This package is not a node in the diagram below because it sits under all of them: `seamless-auth-api`, the server adapters (through `@seamless-auth/core`), the React and React Native SDKs, the admin dashboard, and the CLI all validate against these schemas.
|
|
27
|
+
|
|
28
|
+
```mermaid
|
|
29
|
+
flowchart LR
|
|
30
|
+
browser["Browser<br/>@seamless-auth/react"] -- "signed httpOnly cookies" --> backend
|
|
31
|
+
native["Native app<br/>@seamless-auth/react-native"] -- "bearer tokens" --> backend
|
|
32
|
+
backend["Your backend<br/>@seamless-auth/express, fastify, or nextjs<br/>mounted at /auth"] -- "bearer token + service token" --> api
|
|
33
|
+
api["seamless-auth-api<br/>owns the session"] --> db[("Postgres")]
|
|
34
|
+
backend -. "verifies tokens with JWKS" .-> api
|
|
35
|
+
```
|
|
36
|
+
|
|
37
|
+
[How the pieces connect](https://docs.seamlessauth.com/start/overview/#how-the-pieces-connect) explains each hop. [Compatibility matrix](https://docs.seamlessauth.com/build/ecosystem/#compatibility-matrix) lists which package versions work together.
|
|
38
|
+
|
|
22
39
|
## Requirements
|
|
23
40
|
|
|
24
41
|
| | |
|
|
@@ -185,7 +202,7 @@ history.
|
|
|
185
202
|
## Security
|
|
186
203
|
|
|
187
204
|
Do not open a public issue for a vulnerability. Report it privately to
|
|
188
|
-
**security@
|
|
205
|
+
**security@fellscode.com**. See [SECURITY.md](SECURITY.md) for what to include, our
|
|
189
206
|
acknowledgement window, and the coordinated disclosure process.
|
|
190
207
|
|
|
191
208
|
## Development
|
|
@@ -224,6 +241,10 @@ existing schema as breaking until you can argue otherwise.
|
|
|
224
241
|
|
|
225
242
|
[Apache-2.0](LICENSE) © Fells Code, LLC
|
|
226
243
|
|
|
244
|
+
Project governance, including the
|
|
245
|
+
[Seamless Auth License Pledge](https://github.com/fells-code/.github/blob/main/GOVERNANCE.md#the-seamless-auth-license-pledge),
|
|
246
|
+
is in the fells-code [GOVERNANCE.md](https://github.com/fells-code/.github/blob/main/GOVERNANCE.md).
|
|
247
|
+
|
|
227
248
|
## Links
|
|
228
249
|
|
|
229
250
|
- [npm package](https://www.npmjs.com/package/@seamless-auth/types)
|
package/dist/index.d.ts
CHANGED
|
@@ -18,4 +18,6 @@ export * from './schemas/metrics/schema.js';
|
|
|
18
18
|
export * from './schemas/admin/schema.js';
|
|
19
19
|
export * from './schemas/userImport/schema.js';
|
|
20
20
|
export * from './schemas/enrollment/schema.js';
|
|
21
|
+
export * from './schemas/recovery/schema.js';
|
|
22
|
+
export * from './schemas/policy/schema.js';
|
|
21
23
|
//# sourceMappingURL=index.d.ts.map
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAE5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAE5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -18,4 +18,6 @@ export * from './schemas/metrics/schema.js';
|
|
|
18
18
|
export * from './schemas/admin/schema.js';
|
|
19
19
|
export * from './schemas/userImport/schema.js';
|
|
20
20
|
export * from './schemas/enrollment/schema.js';
|
|
21
|
+
export * from './schemas/recovery/schema.js';
|
|
22
|
+
export * from './schemas/policy/schema.js';
|
|
21
23
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAE5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAE5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC"}
|
|
@@ -50,6 +50,7 @@ export declare const RefreshSuccessResponseSchema: z.ZodObject<{
|
|
|
50
50
|
phone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
|
|
51
51
|
ttl: z.ZodOptional<z.ZodNumber>;
|
|
52
52
|
refreshTtl: z.ZodOptional<z.ZodNumber>;
|
|
53
|
+
recovery: z.ZodOptional<z.ZodBoolean>;
|
|
53
54
|
}, z.core.$strip>;
|
|
54
55
|
export type RefreshSuccessResponse = z.infer<typeof RefreshSuccessResponseSchema>;
|
|
55
56
|
export declare const LogoutScopeSchema: z.ZodEnum<{
|
|
@@ -138,6 +139,7 @@ export declare const OTPVerifyTokenSuccessSchema: z.ZodObject<{
|
|
|
138
139
|
ttl: z.ZodOptional<z.ZodNumber>;
|
|
139
140
|
refreshToken: z.ZodOptional<z.ZodString>;
|
|
140
141
|
refreshTtl: z.ZodOptional<z.ZodNumber>;
|
|
142
|
+
recovery: z.ZodOptional<z.ZodBoolean>;
|
|
141
143
|
nextStep: z.ZodOptional<z.ZodEnum<{
|
|
142
144
|
enroll_passkey: "enroll_passkey";
|
|
143
145
|
}>>;
|
|
@@ -157,6 +159,7 @@ export declare const MagicLinkPollSuccessSchema: z.ZodObject<{
|
|
|
157
159
|
ttl: z.ZodOptional<z.ZodNumber>;
|
|
158
160
|
refreshToken: z.ZodOptional<z.ZodString>;
|
|
159
161
|
refreshTtl: z.ZodOptional<z.ZodNumber>;
|
|
162
|
+
recovery: z.ZodOptional<z.ZodBoolean>;
|
|
160
163
|
nextStep: z.ZodOptional<z.ZodEnum<{
|
|
161
164
|
enroll_passkey: "enroll_passkey";
|
|
162
165
|
}>>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/auth/auth.schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAIpB,eAAO,MAAM,oBAAoB;;;EAA6B,CAAC;AAE/D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;iBAOrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,yBAAyB,gCAAe,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,yDAAyD;AACzD,eAAO,MAAM,oBAAoB,gCAA4B,CAAC;AAE9D,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B
|
|
1
|
+
{"version":3,"file":"auth.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/auth/auth.schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAIpB,eAAO,MAAM,oBAAoB;;;EAA6B,CAAC;AAE/D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;iBAOrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,yBAAyB,gCAAe,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,yDAAyD;AACzD,eAAO,MAAM,oBAAoB,gCAA4B,CAAC;AAE9D,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;iBAcvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,iBAAiB;;;EAA8C,CAAC;AAE7E,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,yBAAyB;;;iBAIpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;iBAWpC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEpF,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;iBAIrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,cAAc;;EAA6B,CAAC;AAEzD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;iBAItC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;iBAKrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,kFAAkF;AAClF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;iBAIpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;iBAQjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
|
|
@@ -34,6 +34,8 @@ export const RefreshSuccessResponseSchema = z.object({
|
|
|
34
34
|
phone: z.string().nullable().optional(),
|
|
35
35
|
ttl: z.number().optional(),
|
|
36
36
|
refreshTtl: z.number().optional(),
|
|
37
|
+
/** A restricted recovery session; see `RecoverySessionResponseSchema`. */
|
|
38
|
+
recovery: z.boolean().optional(),
|
|
37
39
|
});
|
|
38
40
|
export const LogoutScopeSchema = z.enum(['current_session', 'all_sessions']);
|
|
39
41
|
export const RegistrationRequestSchema = z.object({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../../src/schemas/auth/auth.schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAI/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAItD,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAK9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;
|
|
1
|
+
{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../../src/schemas/auth/auth.schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAI/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAItD,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAK9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;AAI7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,6EAA6E;IAC7E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,2EAA2E;IAC3E,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,sDAAsD;IACtD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9B,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIzD,MAAM,CAAC,MAAM,2BAA2B,GAAG,4BAA4B,CAAC,IAAI,CAAC;IAC3E,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC,MAAM,CAAC;IACR,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC,IAAI,CAAC;IAC1E,SAAS,EAAE,IAAI;IACf,cAAc,EAAE,IAAI;CACrB,CAAC,CAAC,MAAM,CAAC;IACR,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC"}
|
|
@@ -1,17 +1,22 @@
|
|
|
1
1
|
import z from 'zod';
|
|
2
|
-
export declare const AUTH_EVENT_TYPES: readonly ["admin_device_replacement_recovery", "admin_enrollment_invite_sent", "admin_oauth_provider_restored", "admin_oauth_provider_retired", "
|
|
2
|
+
export declare const AUTH_EVENT_TYPES: readonly ["account_recovery_cancelled", "account_recovery_completed", "account_recovery_started", "account_recovery_verified", "admin_device_replacement_recovery", "admin_enrollment_invite_sent", "admin_oauth_provider_restored", "admin_oauth_provider_retired", "admin_session_revoked", "admin_user_import_completed", "admin_user_imported", "auth_action_incremented", "bearer_token_failed", "bearer_token_success", "bearer_token_suspicious", "break_glass_sign_in", "credentials_deleted", "informational", "internal_user_updated_by_owner", "jwks_failed", "jwks_success", "jwks_suspicious", "login_challenge", "login_failed", "login_success", "login_suspicious", "logout_failed", "logout_success", "logout_suspicious", "magic_link_failed", "magic_link_poll_completed_successfully", "magic_link_requested", "magic_link_success", "mfa_otp_failed", "mfa_otp_success", "mfa_otp_suspicious", "notification_sent", "oauth_login_failed", "oauth_login_started", "oauth_login_success", "otp_failed", "otp_success", "otp_suspicious", "policy_draft_discarded", "policy_draft_saved", "policy_dry_run", "policy_published", "policy_rolled_back", "recovery_code_failed", "recovery_code_used", "recovery_codes_generated", "recovery_otp_failed", "recovery_otp_success", "recovery_otp_suspicious", "refresh_token_failed", "refresh_token_success", "refresh_token_suspicious", "registration_failed", "registration_success", "registration_suspicious", "request_suspicious", "service_token_failed", "service_token_rotated", "service_token_success", "service_token_suspicious", "step_up_challenge", "step_up_failed", "step_up_success", "step_up_suspicious", "system_config_error", "system_config_read", "system_config_updated", "totp_disabled", "totp_enrollment_started", "totp_enrollment_success", "totp_failed", "totp_success", "totp_suspicious", "user_created", "user_data_failed", "user_data_success", "user_data_suspicious", "user_deleted", "verify_otp_failed", "verify_otp_success", "verify_otp_suspicious", "webauthn_login_failed", "webauthn_login_success", "webauthn_login_suspicious", "webauthn_registration_failed", "webauthn_registration_success", "webauthn_registration_suspicious"];
|
|
3
3
|
export declare const AuthEventTypeEnum: z.ZodEnum<{
|
|
4
|
+
account_recovery_cancelled: "account_recovery_cancelled";
|
|
5
|
+
account_recovery_completed: "account_recovery_completed";
|
|
6
|
+
account_recovery_started: "account_recovery_started";
|
|
7
|
+
account_recovery_verified: "account_recovery_verified";
|
|
4
8
|
admin_device_replacement_recovery: "admin_device_replacement_recovery";
|
|
5
9
|
admin_enrollment_invite_sent: "admin_enrollment_invite_sent";
|
|
6
10
|
admin_oauth_provider_restored: "admin_oauth_provider_restored";
|
|
7
11
|
admin_oauth_provider_retired: "admin_oauth_provider_retired";
|
|
12
|
+
admin_session_revoked: "admin_session_revoked";
|
|
8
13
|
admin_user_import_completed: "admin_user_import_completed";
|
|
9
14
|
admin_user_imported: "admin_user_imported";
|
|
10
|
-
admin_session_revoked: "admin_session_revoked";
|
|
11
15
|
auth_action_incremented: "auth_action_incremented";
|
|
12
16
|
bearer_token_failed: "bearer_token_failed";
|
|
13
17
|
bearer_token_success: "bearer_token_success";
|
|
14
18
|
bearer_token_suspicious: "bearer_token_suspicious";
|
|
19
|
+
break_glass_sign_in: "break_glass_sign_in";
|
|
15
20
|
credentials_deleted: "credentials_deleted";
|
|
16
21
|
informational: "informational";
|
|
17
22
|
internal_user_updated_by_owner: "internal_user_updated_by_owner";
|
|
@@ -39,6 +44,14 @@ export declare const AuthEventTypeEnum: z.ZodEnum<{
|
|
|
39
44
|
otp_failed: "otp_failed";
|
|
40
45
|
otp_success: "otp_success";
|
|
41
46
|
otp_suspicious: "otp_suspicious";
|
|
47
|
+
policy_draft_discarded: "policy_draft_discarded";
|
|
48
|
+
policy_draft_saved: "policy_draft_saved";
|
|
49
|
+
policy_dry_run: "policy_dry_run";
|
|
50
|
+
policy_published: "policy_published";
|
|
51
|
+
policy_rolled_back: "policy_rolled_back";
|
|
52
|
+
recovery_code_failed: "recovery_code_failed";
|
|
53
|
+
recovery_code_used: "recovery_code_used";
|
|
54
|
+
recovery_codes_generated: "recovery_codes_generated";
|
|
42
55
|
recovery_otp_failed: "recovery_otp_failed";
|
|
43
56
|
recovery_otp_success: "recovery_otp_success";
|
|
44
57
|
recovery_otp_suspicious: "recovery_otp_suspicious";
|
|
@@ -107,17 +120,22 @@ export declare const AuthEventQuerySchema: z.ZodObject<{
|
|
|
107
120
|
actorUserId: z.ZodOptional<z.ZodString>;
|
|
108
121
|
sessionId: z.ZodOptional<z.ZodString>;
|
|
109
122
|
type: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
|
|
123
|
+
account_recovery_cancelled: "account_recovery_cancelled";
|
|
124
|
+
account_recovery_completed: "account_recovery_completed";
|
|
125
|
+
account_recovery_started: "account_recovery_started";
|
|
126
|
+
account_recovery_verified: "account_recovery_verified";
|
|
110
127
|
admin_device_replacement_recovery: "admin_device_replacement_recovery";
|
|
111
128
|
admin_enrollment_invite_sent: "admin_enrollment_invite_sent";
|
|
112
129
|
admin_oauth_provider_restored: "admin_oauth_provider_restored";
|
|
113
130
|
admin_oauth_provider_retired: "admin_oauth_provider_retired";
|
|
131
|
+
admin_session_revoked: "admin_session_revoked";
|
|
114
132
|
admin_user_import_completed: "admin_user_import_completed";
|
|
115
133
|
admin_user_imported: "admin_user_imported";
|
|
116
|
-
admin_session_revoked: "admin_session_revoked";
|
|
117
134
|
auth_action_incremented: "auth_action_incremented";
|
|
118
135
|
bearer_token_failed: "bearer_token_failed";
|
|
119
136
|
bearer_token_success: "bearer_token_success";
|
|
120
137
|
bearer_token_suspicious: "bearer_token_suspicious";
|
|
138
|
+
break_glass_sign_in: "break_glass_sign_in";
|
|
121
139
|
credentials_deleted: "credentials_deleted";
|
|
122
140
|
informational: "informational";
|
|
123
141
|
internal_user_updated_by_owner: "internal_user_updated_by_owner";
|
|
@@ -145,6 +163,14 @@ export declare const AuthEventQuerySchema: z.ZodObject<{
|
|
|
145
163
|
otp_failed: "otp_failed";
|
|
146
164
|
otp_success: "otp_success";
|
|
147
165
|
otp_suspicious: "otp_suspicious";
|
|
166
|
+
policy_draft_discarded: "policy_draft_discarded";
|
|
167
|
+
policy_draft_saved: "policy_draft_saved";
|
|
168
|
+
policy_dry_run: "policy_dry_run";
|
|
169
|
+
policy_published: "policy_published";
|
|
170
|
+
policy_rolled_back: "policy_rolled_back";
|
|
171
|
+
recovery_code_failed: "recovery_code_failed";
|
|
172
|
+
recovery_code_used: "recovery_code_used";
|
|
173
|
+
recovery_codes_generated: "recovery_codes_generated";
|
|
148
174
|
recovery_otp_failed: "recovery_otp_failed";
|
|
149
175
|
recovery_otp_success: "recovery_otp_success";
|
|
150
176
|
recovery_otp_suspicious: "recovery_otp_suspicious";
|
|
@@ -187,17 +213,22 @@ export declare const AuthEventQuerySchema: z.ZodObject<{
|
|
|
187
213
|
webauthn_registration_success: "webauthn_registration_success";
|
|
188
214
|
webauthn_registration_suspicious: "webauthn_registration_suspicious";
|
|
189
215
|
}>, z.ZodString, z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
|
|
216
|
+
account_recovery_cancelled: "account_recovery_cancelled";
|
|
217
|
+
account_recovery_completed: "account_recovery_completed";
|
|
218
|
+
account_recovery_started: "account_recovery_started";
|
|
219
|
+
account_recovery_verified: "account_recovery_verified";
|
|
190
220
|
admin_device_replacement_recovery: "admin_device_replacement_recovery";
|
|
191
221
|
admin_enrollment_invite_sent: "admin_enrollment_invite_sent";
|
|
192
222
|
admin_oauth_provider_restored: "admin_oauth_provider_restored";
|
|
193
223
|
admin_oauth_provider_retired: "admin_oauth_provider_retired";
|
|
224
|
+
admin_session_revoked: "admin_session_revoked";
|
|
194
225
|
admin_user_import_completed: "admin_user_import_completed";
|
|
195
226
|
admin_user_imported: "admin_user_imported";
|
|
196
|
-
admin_session_revoked: "admin_session_revoked";
|
|
197
227
|
auth_action_incremented: "auth_action_incremented";
|
|
198
228
|
bearer_token_failed: "bearer_token_failed";
|
|
199
229
|
bearer_token_success: "bearer_token_success";
|
|
200
230
|
bearer_token_suspicious: "bearer_token_suspicious";
|
|
231
|
+
break_glass_sign_in: "break_glass_sign_in";
|
|
201
232
|
credentials_deleted: "credentials_deleted";
|
|
202
233
|
informational: "informational";
|
|
203
234
|
internal_user_updated_by_owner: "internal_user_updated_by_owner";
|
|
@@ -225,6 +256,14 @@ export declare const AuthEventQuerySchema: z.ZodObject<{
|
|
|
225
256
|
otp_failed: "otp_failed";
|
|
226
257
|
otp_success: "otp_success";
|
|
227
258
|
otp_suspicious: "otp_suspicious";
|
|
259
|
+
policy_draft_discarded: "policy_draft_discarded";
|
|
260
|
+
policy_draft_saved: "policy_draft_saved";
|
|
261
|
+
policy_dry_run: "policy_dry_run";
|
|
262
|
+
policy_published: "policy_published";
|
|
263
|
+
policy_rolled_back: "policy_rolled_back";
|
|
264
|
+
recovery_code_failed: "recovery_code_failed";
|
|
265
|
+
recovery_code_used: "recovery_code_used";
|
|
266
|
+
recovery_codes_generated: "recovery_codes_generated";
|
|
228
267
|
recovery_otp_failed: "recovery_otp_failed";
|
|
229
268
|
recovery_otp_success: "recovery_otp_success";
|
|
230
269
|
recovery_otp_suspicious: "recovery_otp_suspicious";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/authEvent/schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAGpB,eAAO,MAAM,gBAAgB,
|
|
1
|
+
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/authEvent/schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAGpB,eAAO,MAAM,gBAAgB,ynEA6FnB,CAAC;AAEX,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA2B,CAAC;AAE1D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI9D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;iBAsD1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;iBAGnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
|
|
@@ -1,17 +1,22 @@
|
|
|
1
1
|
import z from 'zod';
|
|
2
2
|
import { IsoDate } from '../../shared.js';
|
|
3
3
|
export const AUTH_EVENT_TYPES = [
|
|
4
|
+
'account_recovery_cancelled',
|
|
5
|
+
'account_recovery_completed',
|
|
6
|
+
'account_recovery_started',
|
|
7
|
+
'account_recovery_verified',
|
|
4
8
|
'admin_device_replacement_recovery',
|
|
5
9
|
'admin_enrollment_invite_sent',
|
|
6
10
|
'admin_oauth_provider_restored',
|
|
7
11
|
'admin_oauth_provider_retired',
|
|
12
|
+
'admin_session_revoked',
|
|
8
13
|
'admin_user_import_completed',
|
|
9
14
|
'admin_user_imported',
|
|
10
|
-
'admin_session_revoked',
|
|
11
15
|
'auth_action_incremented',
|
|
12
16
|
'bearer_token_failed',
|
|
13
17
|
'bearer_token_success',
|
|
14
18
|
'bearer_token_suspicious',
|
|
19
|
+
'break_glass_sign_in',
|
|
15
20
|
'credentials_deleted',
|
|
16
21
|
'informational',
|
|
17
22
|
'internal_user_updated_by_owner',
|
|
@@ -39,6 +44,14 @@ export const AUTH_EVENT_TYPES = [
|
|
|
39
44
|
'otp_failed',
|
|
40
45
|
'otp_success',
|
|
41
46
|
'otp_suspicious',
|
|
47
|
+
'policy_draft_discarded',
|
|
48
|
+
'policy_draft_saved',
|
|
49
|
+
'policy_dry_run',
|
|
50
|
+
'policy_published',
|
|
51
|
+
'policy_rolled_back',
|
|
52
|
+
'recovery_code_failed',
|
|
53
|
+
'recovery_code_used',
|
|
54
|
+
'recovery_codes_generated',
|
|
42
55
|
'recovery_otp_failed',
|
|
43
56
|
'recovery_otp_success',
|
|
44
57
|
'recovery_otp_suspicious',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/authEvent/schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,mCAAmC;IACnC,8BAA8B;IAC9B,+BAA+B;IAC/B,8BAA8B;IAC9B,6BAA6B;IAC7B,qBAAqB;IACrB,
|
|
1
|
+
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/authEvent/schema.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,4BAA4B;IAC5B,4BAA4B;IAC5B,0BAA0B;IAC1B,2BAA2B;IAC3B,mCAAmC;IACnC,8BAA8B;IAC9B,+BAA+B;IAC/B,8BAA8B;IAC9B,uBAAuB;IACvB,6BAA6B;IAC7B,qBAAqB;IACrB,yBAAyB;IACzB,qBAAqB;IACrB,sBAAsB;IACtB,yBAAyB;IACzB,qBAAqB;IACrB,qBAAqB;IACrB,eAAe;IACf,gCAAgC;IAChC,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,gBAAgB;IAChB,mBAAmB;IACnB,mBAAmB;IACnB,wCAAwC;IACxC,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;IAChB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,qBAAqB;IACrB,YAAY;IACZ,aAAa;IACb,gBAAgB;IAChB,wBAAwB;IACxB,oBAAoB;IACpB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,0BAA0B;IAC1B,qBAAqB;IACrB,sBAAsB;IACtB,yBAAyB;IACzB,sBAAsB;IACtB,uBAAuB;IACvB,0BAA0B;IAC1B,qBAAqB;IACrB,sBAAsB;IACtB,yBAAyB;IACzB,oBAAoB;IACpB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,0BAA0B;IAC1B,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,uBAAuB;IACvB,eAAe;IACf,yBAAyB;IACzB,yBAAyB;IACzB,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,cAAc;IACd,kBAAkB;IAClB,mBAAmB;IACnB,sBAAsB;IACtB,cAAc;IACd,mBAAmB;IACnB,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IACvB,wBAAwB;IACxB,2BAA2B;IAC3B,8BAA8B;IAC9B,+BAA+B;IAC/B,kCAAkC;CAC1B,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAI1D,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC;;;;;;;OAOG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C;;;;;OAKG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C;;;;;OAKG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C;;;OAGG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C;;;OAGG;IACH,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,UAAU,EAAE,OAAO;IACnB,UAAU,EAAE,OAAO;CACpB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAE3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,oFAAoF;IACpF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,0DAA0D;IAC1D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC;SACJ,KAAK,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;SACzF,QAAQ,EAAE;IAEb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC"}
|
|
@@ -31,11 +31,13 @@ export declare const StartOAuthLoginResponseSchema: z.ZodObject<{
|
|
|
31
31
|
}, z.core.$strip>;
|
|
32
32
|
state: z.ZodString;
|
|
33
33
|
authorizationUrl: z.ZodURL;
|
|
34
|
+
binding: z.ZodOptional<z.ZodString>;
|
|
34
35
|
}, z.core.$strip>;
|
|
35
36
|
export type StartOAuthLoginResponse = z.infer<typeof StartOAuthLoginResponseSchema>;
|
|
36
37
|
export declare const FinishOAuthLoginRequestSchema: z.ZodObject<{
|
|
37
38
|
code: z.ZodString;
|
|
38
39
|
state: z.ZodString;
|
|
40
|
+
binding: z.ZodOptional<z.ZodString>;
|
|
39
41
|
}, z.core.$strip>;
|
|
40
42
|
export type FinishOAuthLoginRequest = z.infer<typeof FinishOAuthLoginRequestSchema>;
|
|
41
43
|
export declare const OAuthLoginSuccessResponseSchema: z.ZodObject<{
|
|
@@ -49,6 +51,7 @@ export declare const OAuthLoginSuccessResponseSchema: z.ZodObject<{
|
|
|
49
51
|
ttl: z.ZodOptional<z.ZodNumber>;
|
|
50
52
|
refreshToken: z.ZodOptional<z.ZodString>;
|
|
51
53
|
refreshTtl: z.ZodOptional<z.ZodNumber>;
|
|
54
|
+
recovery: z.ZodOptional<z.ZodBoolean>;
|
|
52
55
|
returnTo: z.ZodOptional<z.ZodURL>;
|
|
53
56
|
nextStep: z.ZodOptional<z.ZodEnum<{
|
|
54
57
|
enroll_passkey: "enroll_passkey";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/oauth/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,wFAAwF;AACxF,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,4BAA4B;;;;;;iBAEvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,6BAA6B
|
|
1
|
+
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/oauth/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,wFAAwF;AACxF,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,4BAA4B;;;;;;iBAEvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,6BAA6B;;;;;;;;;iBAUxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,6BAA6B;;;;iBAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;iBAoB1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,iBAAiB,2IAOpB,CAAC;AAEX,eAAO,MAAM,oBAAoB;;;;;;EAA4B,CAAC;AAE9D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,6BAA6B;;;;;;;;;;iBAIxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}
|
|
@@ -22,10 +22,18 @@ export const StartOAuthLoginResponseSchema = z.object({
|
|
|
22
22
|
provider: PublicOAuthProviderSchema,
|
|
23
23
|
state: z.string(),
|
|
24
24
|
authorizationUrl: z.url(),
|
|
25
|
+
/**
|
|
26
|
+
* Binds `state` to the client that started the sign-in. The client keeps it and sends
|
|
27
|
+
* it back with the callback; it never goes to the provider. Optional only so a client
|
|
28
|
+
* can parse a response from an auth server that predates it.
|
|
29
|
+
*/
|
|
30
|
+
binding: z.string().optional(),
|
|
25
31
|
});
|
|
26
32
|
export const FinishOAuthLoginRequestSchema = z.object({
|
|
27
33
|
code: z.string().trim().min(1),
|
|
28
34
|
state: z.string().trim().min(1),
|
|
35
|
+
/** The `binding` the start response returned to this client. */
|
|
36
|
+
binding: z.string().trim().min(1).optional(),
|
|
29
37
|
});
|
|
30
38
|
export const OAuthLoginSuccessResponseSchema = RefreshSuccessResponseSchema.omit({
|
|
31
39
|
sessionId: true,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/oauth/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,UAAU,EAAE,qBAAqB;CAClC,CAAC,CAAC;AAIH,wFAAwF;AACxF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC9C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,yBAAyB;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE;
|
|
1
|
+
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/oauth/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,UAAU,EAAE,qBAAqB;CAClC,CAAC,CAAC;AAIH,wFAAwF;AACxF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC9C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,yBAAyB;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE;IACzB;;;;OAIG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,gEAAgE;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC,IAAI,CAAC;IAC/E,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC,MAAM,CAAC;IACR;;;;;;;;OAQG;IACH,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC;;;;;OAKG;IACH,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,qBAAqB;IACrB,0BAA0B;IAC1B,uBAAuB;IACvB,wBAAwB;IACxB,iFAAiF;IACjF,wBAAwB;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAI9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC"}
|