@snokam/platform-client 3.1.0 → 3.1.1

package/CHANGELOG.md

@@ -3,6 +3,17 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [3.1.1](https://github.com/GIT_USER_ID/GIT_REPO_ID/compare/@snokam/platform-client@3.1.0...@snokam/platform-client@3.1.1) (2026-10-02)
+
+
+### Bug Fixes
+
+* **auth:** harden app sign-in after a security review, and give sign-in one home ([#2543](https://github.com/GIT_USER_ID/GIT_REPO_ID/issues/2543)) ([7100eb7](https://github.com/GIT_USER_ID/GIT_REPO_ID/commit/7100eb79ce278875eafe75228ab496dedc0ae151))
+
+
+
+
+
 # [3.1.0](https://github.com/GIT_USER_ID/GIT_REPO_ID/compare/@snokam/platform-client@3.0.0...@snokam/platform-client@3.1.0) (2026-10-02)
 
 

package/README.md

@@ -1,4 +1,4 @@
-# @snokam/platform-client@3.0.0
+# @snokam/platform-client@3.1.0
 
 A TypeScript SDK client for the snokam.snosky.no API.
 
@@ -58,7 +58,7 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 | ----- | ------ | ------------ | -------------
 *PlatformClient* | [**addCustomDomain**](docs/PlatformClient.md#addcustomdomainoperation) | **POST** /v1.0/protected/businesses/{id}/custom-domains | Add a custom domain
 *PlatformClient* | [**approveDevice**](docs/PlatformClient.md#approvedeviceoperation) | **POST** /v1.0/protected/businesses/{id}/devices | Approve a screen into this business
-*PlatformClient* | [**approveOAuthAuthorization**](docs/PlatformClient.md#approveoauthauthorization) | **POST** /v1.0/protected/oauth/authorization | Approve an authorization request as the signed-in user
+*PlatformClient* | [**approveOAuthAuthorization**](docs/PlatformClient.md#approveoauthauthorization) | **POST** /v1.0/protected/oauth/authorization | Record the user\'s approval of an app\'s sign-in request
 *PlatformClient* | [**assignBusinessEmployeeSystem**](docs/PlatformClient.md#assignbusinessemployeesystem) | **POST** /v1.0/protected/businesses/{id}/employees/{upn}/systems/{systemKey} | Grant an employee a seat in a third-party system
 *PlatformClient* | [**backfillBridgeWebhook**](docs/PlatformClient.md#backfillbridgewebhook) | **POST** /v1.0/protected/businesses/{id}/bridge-webhook | Re-create a business\'s Sanity bridge webhook with a managed API key
 *PlatformClient* | [**checkIntegration**](docs/PlatformClient.md#checkintegration) | **POST** /v1.0/protected/businesses/{id}/integrations/{key}/check | Run a live integration connectivity check
@@ -149,7 +149,7 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 *PlatformClient* | [**powerOfficeOnboardingReturn**](docs/PlatformClient.md#powerofficeonboardingreturn) | **GET** /v1.0/connect/poweroffice/return/{reference} | PowerOffice onboarding return
 *PlatformClient* | [**previewBillingInvoice**](docs/PlatformClient.md#previewbillinginvoice) | **POST** /v1.0/protected/businesses/{id}/billing/invoice-preview | Preview a month\'s invoice basis
 *PlatformClient* | [**previewDevice**](docs/PlatformClient.md#previewdevice) | **GET** /v1.0/protected/businesses/{id}/devices/preview | Look up a pairing code before approving
-*PlatformClient* | [**previewOAuthAuthorization**](docs/PlatformClient.md#previewoauthauthorization) | **POST** /v1.0/protected/oauth/authorization/preview | Describe an authorization request before the user approves it
+*PlatformClient* | [**previewOAuthAuthorization**](docs/PlatformClient.md#previewoauthauthorization) | **POST** /v1.0/protected/oauth/authorization/preview | Describe an app\'s sign-in request before the user approves it
 *PlatformClient* | [**provisionBusiness**](docs/PlatformClient.md#provisionbusiness) | **POST** /v1.0/protected/businesses/{id}/provision | Provision a business
 *PlatformClient* | [**publicCapabilities**](docs/PlatformClient.md#publiccapabilities) | **GET** /v1.0/public/capabilities | Get capabilities
 *PlatformClient* | [**publicModules**](docs/PlatformClient.md#publicmodules) | **GET** /v1.0/public/modules | Get available modules
@@ -389,7 +389,7 @@ and is automatically generated by the
 [OpenAPI Generator](https://openapi-generator.tech) project:
 
 - API version: `v1.0.0`
-- Package version: `3.0.0`
+- Package version: `3.1.0`
 - Generator version: `7.23.0`
 - Build package: `org.openapitools.codegen.languages.TypeScriptFetchClientCodegen`
 

package/dist/apis/PlatformClient.d.ts

@@ -440,13 +440,13 @@ export declare class PlatformClient extends runtime.BaseAPI {
      */
     approveOAuthAuthorizationRequestOpts(requestParameters: ApproveOAuthAuthorizationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     approveOAuthAuthorizationRaw(requestParameters: ApproveOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IssuedAuthorizationCode>>;
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     approveOAuthAuthorization(requestParameters: ApproveOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IssuedAuthorizationCode>;
     /**
@@ -1710,13 +1710,13 @@ export declare class PlatformClient extends runtime.BaseAPI {
      */
     previewOAuthAuthorizationRequestOpts(requestParameters: PreviewOAuthAuthorizationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     previewOAuthAuthorizationRaw(requestParameters: PreviewOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AuthorizationPreview>>;
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     previewOAuthAuthorization(requestParameters: PreviewOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AuthorizationPreview>;
     /**

package/dist/apis/PlatformClient.js

@@ -154,8 +154,8 @@ class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     approveOAuthAuthorizationRaw(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -165,8 +165,8 @@ class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     approveOAuthAuthorization(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -4239,8 +4239,8 @@ class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     previewOAuthAuthorizationRaw(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -4250,8 +4250,8 @@ class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     previewOAuthAuthorization(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {

package/dist/esm/apis/PlatformClient.d.ts

@@ -440,13 +440,13 @@ export declare class PlatformClient extends runtime.BaseAPI {
      */
     approveOAuthAuthorizationRequestOpts(requestParameters: ApproveOAuthAuthorizationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     approveOAuthAuthorizationRaw(requestParameters: ApproveOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IssuedAuthorizationCode>>;
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     approveOAuthAuthorization(requestParameters: ApproveOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IssuedAuthorizationCode>;
     /**
@@ -1710,13 +1710,13 @@ export declare class PlatformClient extends runtime.BaseAPI {
      */
     previewOAuthAuthorizationRequestOpts(requestParameters: PreviewOAuthAuthorizationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     previewOAuthAuthorizationRaw(requestParameters: PreviewOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AuthorizationPreview>>;
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     previewOAuthAuthorization(requestParameters: PreviewOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AuthorizationPreview>;
     /**

package/dist/esm/apis/PlatformClient.js

@@ -151,8 +151,8 @@ export class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     approveOAuthAuthorizationRaw(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -162,8 +162,8 @@ export class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     approveOAuthAuthorization(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -4236,8 +4236,8 @@ export class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     previewOAuthAuthorizationRaw(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -4247,8 +4247,8 @@ export class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     previewOAuthAuthorization(requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {

package/dist/esm/models/index.d.ts

@@ -332,6 +332,12 @@ export interface AuthorizationRequest {
      * @memberof AuthorizationRequest
      */
     resource?: string | null;
+    /**
+     *
+     * @type {string}
+     * @memberof AuthorizationRequest
+     */
+    userToken?: string | null;
 }
 /**
  *

package/dist/models/index.d.ts

@@ -332,6 +332,12 @@ export interface AuthorizationRequest {
      * @memberof AuthorizationRequest
      */
     resource?: string | null;
+    /**
+     *
+     * @type {string}
+     * @memberof AuthorizationRequest
+     */
+    userToken?: string | null;
 }
 /**
  *

package/docs/AuthorizationRequest.md

@@ -11,6 +11,7 @@ Name | Type
 `codeChallengeMethod` | string
 `redirectUri` | string
 `resource` | string
+`userToken` | string
 
 
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)

package/docs/PlatformClient.md

@@ -6,7 +6,7 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 |------------- | ------------- | -------------|
 | [**addCustomDomain**](PlatformClient.md#addcustomdomainoperation) | **POST** /v1.0/protected/businesses/{id}/custom-domains | Add a custom domain |
 | [**approveDevice**](PlatformClient.md#approvedeviceoperation) | **POST** /v1.0/protected/businesses/{id}/devices | Approve a screen into this business |
-| [**approveOAuthAuthorization**](PlatformClient.md#approveoauthauthorization) | **POST** /v1.0/protected/oauth/authorization | Approve an authorization request as the signed-in user |
+| [**approveOAuthAuthorization**](PlatformClient.md#approveoauthauthorization) | **POST** /v1.0/protected/oauth/authorization | Record the user\'s approval of an app\'s sign-in request |
 | [**assignBusinessEmployeeSystem**](PlatformClient.md#assignbusinessemployeesystem) | **POST** /v1.0/protected/businesses/{id}/employees/{upn}/systems/{systemKey} | Grant an employee a seat in a third-party system |
 | [**backfillBridgeWebhook**](PlatformClient.md#backfillbridgewebhook) | **POST** /v1.0/protected/businesses/{id}/bridge-webhook | Re-create a business\'s Sanity bridge webhook with a managed API key |
 | [**checkIntegration**](PlatformClient.md#checkintegration) | **POST** /v1.0/protected/businesses/{id}/integrations/{key}/check | Run a live integration connectivity check |
@@ -97,7 +97,7 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 | [**powerOfficeOnboardingReturn**](PlatformClient.md#powerofficeonboardingreturn) | **GET** /v1.0/connect/poweroffice/return/{reference} | PowerOffice onboarding return |
 | [**previewBillingInvoice**](PlatformClient.md#previewbillinginvoice) | **POST** /v1.0/protected/businesses/{id}/billing/invoice-preview | Preview a month\'s invoice basis |
 | [**previewDevice**](PlatformClient.md#previewdevice) | **GET** /v1.0/protected/businesses/{id}/devices/preview | Look up a pairing code before approving |
-| [**previewOAuthAuthorization**](PlatformClient.md#previewoauthauthorization) | **POST** /v1.0/protected/oauth/authorization/preview | Describe an authorization request before the user approves it |
+| [**previewOAuthAuthorization**](PlatformClient.md#previewoauthauthorization) | **POST** /v1.0/protected/oauth/authorization/preview | Describe an app\'s sign-in request before the user approves it |
 | [**provisionBusiness**](PlatformClient.md#provisionbusiness) | **POST** /v1.0/protected/businesses/{id}/provision | Provision a business |
 | [**publicCapabilities**](PlatformClient.md#publiccapabilities) | **GET** /v1.0/public/capabilities | Get capabilities |
 | [**publicModules**](PlatformClient.md#publicmodules) | **GET** /v1.0/public/modules | Get available modules |
@@ -294,9 +294,9 @@ example().catch(console.error);
 
 > IssuedAuthorizationCode approveOAuthAuthorization(authorizationRequest)
 
-Approve an authorization request as the signed-in user
+Record the user\'s approval of an app\'s sign-in request
 
-Issues a single-use authorization code the client redeems at the token endpoint.
+Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
 
 ### Example
 
@@ -6712,9 +6712,9 @@ example().catch(console.error);
 
 > AuthorizationPreview previewOAuthAuthorization(authorizationRequest)
 
-Describe an authorization request before the user approves it
+Describe an app\'s sign-in request before the user approves it
 
-Validates the client, redirect URI and resource for the signed-in user and names the client.
+Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
 
 ### Example
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snokam/platform-client",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "OpenAPI client for @snokam/platform-client",
   "author": "OpenAPI-Generator",
   "repository": {

package/src/apis/PlatformClient.ts

@@ -794,8 +794,8 @@ export class PlatformClient extends runtime.BaseAPI {
     }
 
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     async approveOAuthAuthorizationRaw(requestParameters: ApproveOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IssuedAuthorizationCode>> {
         const requestOptions = await this.approveOAuthAuthorizationRequestOpts(requestParameters);
@@ -805,8 +805,8 @@ export class PlatformClient extends runtime.BaseAPI {
     }
 
     /**
-     * Issues a single-use authorization code the client redeems at the token endpoint.
-     * Approve an authorization request as the signed-in user
+     * Called by the login site after the user consents. Issues a single-use authorization code the app redeems at the token endpoint.
+     * Record the user\'s approval of an app\'s sign-in request
      */
     async approveOAuthAuthorization(requestParameters: ApproveOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IssuedAuthorizationCode> {
         const response = await this.approveOAuthAuthorizationRaw(requestParameters, initOverrides);
@@ -5534,8 +5534,8 @@ export class PlatformClient extends runtime.BaseAPI {
     }
 
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     async previewOAuthAuthorizationRaw(requestParameters: PreviewOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AuthorizationPreview>> {
         const requestOptions = await this.previewOAuthAuthorizationRequestOpts(requestParameters);
@@ -5545,8 +5545,8 @@ export class PlatformClient extends runtime.BaseAPI {
     }
 
     /**
-     * Validates the client, redirect URI and resource for the signed-in user and names the client.
-     * Describe an authorization request before the user approves it
+     * Called by the login site. Validates the app, redirect URI and resource for the user whose access token is in the body, and names the app.
+     * Describe an app\'s sign-in request before the user approves it
      */
     async previewOAuthAuthorization(requestParameters: PreviewOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AuthorizationPreview> {
         const response = await this.previewOAuthAuthorizationRaw(requestParameters, initOverrides);

package/src/models/index.ts

@@ -334,6 +334,12 @@ export interface AuthorizationRequest {
      * @memberof AuthorizationRequest
      */
     resource?: string | null;
+    /**
+     * 
+     * @type {string}
+     * @memberof AuthorizationRequest
+     */
+    userToken?: string | null;
 }
 /**
  *