@spfn/auth 0.3.0-beta.6 → 0.3.0-beta.8

package/dist/index.js

@@ -137,6 +137,39 @@ var KeyNotFoundError = class extends NotFoundError {
     this.name = "KeyNotFoundError";
   }
 };
+var DeviceAuthNotFoundError = class extends NotFoundError {
+  constructor(data = {}) {
+    super({ message: data.message || "Device authorization not found", details: data.details });
+    this.name = "DeviceAuthNotFoundError";
+  }
+};
+var DeviceAuthExpiredError = class extends ValidationError {
+  constructor(data = {}) {
+    super({
+      message: data.message || "This device code has expired. Start again on the other device.",
+      details: data.details
+    });
+    this.name = "DeviceAuthExpiredError";
+  }
+};
+var DeviceAuthAlreadyHandledError = class extends ConflictError {
+  constructor(data = {}) {
+    super({
+      message: data.message || "This device request has already been answered",
+      details: data.details
+    });
+    this.name = "DeviceAuthAlreadyHandledError";
+  }
+};
+var DeviceAuthDeniedError = class extends ForbiddenError {
+  constructor(data = {}) {
+    super({
+      message: data.message || "This device request was denied",
+      details: data.details
+    });
+    this.name = "DeviceAuthDeniedError";
+  }
+};
 var NonceKeyBindingError = class extends ValidationError {
   constructor(data = {}) {
     super({
@@ -268,6 +301,10 @@ authErrorRegistry.append([
   InvalidSignupSetupSessionError,
   KeyNotFoundError,
   KeyIdAlreadyRegisteredError,
+  DeviceAuthNotFoundError,
+  DeviceAuthExpiredError,
+  DeviceAuthAlreadyHandledError,
+  DeviceAuthDeniedError,
   VerificationTokenPurposeMismatchError,
   VerificationTokenTargetMismatchError,
   InsufficientPermissionsError,
@@ -283,6 +320,11 @@ var routeMap = {
   confirmSignupLink: { method: "POST", path: "/_auth/signup/email/confirm" },
   completeSignup: { method: "POST", path: "/_auth/signup/password" },
   login: { method: "POST", path: "/_auth/login" },
+  startDeviceAuth: { method: "POST", path: "/_auth/device/start" },
+  pollDeviceAuth: { method: "POST", path: "/_auth/device/poll" },
+  getDeviceAuthInfo: { method: "POST", path: "/_auth/device/info" },
+  approveDeviceAuth: { method: "POST", path: "/_auth/device/approve" },
+  denyDeviceAuth: { method: "POST", path: "/_auth/device/deny" },
   logout: { method: "POST", path: "/_auth/logout" },
   rotateKey: { method: "POST", path: "/_auth/keys/rotate" },
   listKeys: { method: "POST", path: "/_auth/keys/list" },
@@ -3098,6 +3140,39 @@ var PlatformSchema = Type.Union(
   KEY_PLATFORM.map((platform) => Type.Literal(platform)),
   { description: "Platform the key lives on" }
 );
+var PublicKeySchema = Type.String({
+  maxLength: 2048,
+  description: "Client public key, SPKI DER in base64"
+});
+var KeyIdSchema = Type.String({
+  maxLength: 64,
+  description: "Key identifier"
+});
+var FingerprintSchema = Type.String({
+  maxLength: 128,
+  description: "SHA-256 hex fingerprint of the public key"
+});
+var UserCodeSchema = Type.String({
+  minLength: 8,
+  maxLength: 16,
+  description: "Device user code as displayed, e.g. WXYZ-2345. Dashes, spaces and case are ignored."
+});
+var DeviceAuthPollResponseSchema = Type.Union([
+  Type.Object({
+    status: Type.Literal("pending"),
+    intervalMillis: Type.Integer({ description: "Milliseconds to wait before polling again" })
+  }),
+  Type.Object({
+    status: Type.Literal("approved"),
+    userId: Type.String(),
+    publicId: Type.String(),
+    email: Type.Optional(Type.String()),
+    phone: Type.Optional(Type.String()),
+    passwordChangeRequired: Type.Boolean()
+  })
+], {
+  description: "Pending, or the login the approval produced"
+});
 var PasswordSchema = Type.String({
   minLength: 8,
   maxLength: 72,