@thunderid/javascript 0.0.1

package/dist/models/oidc-discovery.d.ts

@@ -0,0 +1,370 @@
+/**
+ * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Comprehensive OpenID Connect (OIDC) Provider Metadata.
+ * This interface represents the complete set of configuration metadata
+ * that an OpenID Provider (OP) may publish at its discovery endpoint.
+ *
+ * @remarks
+ * The metadata is organized into several categories:
+ * 1. Core Endpoints - Essential URLs for OIDC operations
+ * 2. Capability Indicators - Supported features and algorithms
+ * 3. Claims and Scopes - Available user information
+ * 4. Security Settings - Authentication and encryption options
+ * 5. UI/UX Configuration - Display and localization preferences
+ *
+ * All fields are optional as per the OIDC Discovery specification,
+ * allowing for flexible provider implementations.
+ *
+ * @see {@link https://openid.net/specs/openid-connect-discovery-1_0.html OpenID Connect Discovery Specification}
+ *
+ * @example
+ * ```typescript
+ * const config: OIDCProviderMetadata = {
+ *   issuer: "https://accounts.example.com",
+ *   authorization_endpoint: "https://accounts.example.com/auth",
+ *   token_endpoint: "https://accounts.example.com/token",
+ *   userinfo_endpoint: "https://accounts.example.com/userinfo",
+ *   jwks_uri: "https://accounts.example.com/jwks.json"
+ * };
+ * ```
+ */
+export interface OIDCDiscoveryApiResponse extends OIDCDiscoveryEndpointsApiResponse {
+    /**
+     * Supported Authentication Context Class References.
+     * Indicates the OP's ability to satisfy specific authentication requirements.
+     */
+    acr_values_supported?: string[];
+    /**
+     * Boolean value specifying whether the OP can pass a sid (session ID) Claim in the Logout Token to
+     * identify the RP session with the OP.
+     */
+    backchannel_logout_session_supported?: boolean;
+    /**
+     * Boolean value specifying whether the OP supports back-channel logout, with true indicating support.
+     * If omitted, the default value is false.
+     */
+    backchannel_logout_supported?: boolean;
+    /**
+     * JSON array containing a list of the Claim Types that the OpenID Provider supports.
+     */
+    claim_types_supported?: string[];
+    /**
+     * Languages and scripts supported for values in Claims being returned, represented as a JSON array
+     * of BCP47 [RFC5646] language tag values. Not all languages and scripts are necessarily
+     * supported for all Claim values.
+     */
+    claims_locales_supported?: string[];
+    /**
+     *  Boolean value specifying whether the OP supports use of the claims parameter,
+     * with true indicating support. If omitted, the default value is false.
+     */
+    claims_parameter_supported?: boolean;
+    /**
+     * JSON array containing a list of the Claim Names of the Claims that
+     * the OpenID Provider MAY be able to supply values for.
+     */
+    claims_supported?: string[];
+    /**
+     * JSON array containing a list of Proof Key for Code
+     * Exchange (PKCE) [RFC7636] code challenge methods supported by this
+     * authorization server.
+     */
+    code_challenge_methods_supported?: string[];
+    /**
+     * JSON array containing a list of the display parameter values that the OpenID Provider supports.
+     */
+    display_values_supported?: string[];
+    /**
+     * Supported OAuth 2.0 grant type values.
+     *
+     * @remarks
+     * Common values include:
+     * - 'authorization_code' - Standard OAuth 2.0 auth code flow
+     * - 'implicit' - Implicit flow
+     * - 'refresh_token' - Refresh token grant
+     * - 'client_credentials' - Client credentials grant
+     */
+    grant_types_supported?: string[];
+    /**
+     * JSON array containing a list of the JWE encryption algorithms (alg values)
+     * supported by the OP for the ID Token to encode the Claims in a JWT [JWT].
+     */
+    id_token_encryption_alg_values_supported?: string[];
+    /**
+     * JSON array containing a list of the JWE encryption algorithms (enc values)
+     * supported by the OP for the ID Token to encode the Claims in a JWT [JWT].
+     */
+    id_token_encryption_enc_values_supported?: string[];
+    /**
+     * JSON array containing a list of the JWS signing algorithms (alg values)
+     * supported by the OP for the ID Token to encode the Claims in a JWT [JWT].
+     */
+    id_token_signing_alg_values_supported?: string[];
+    /**
+     * JSON array containing a list of client authentication
+     * methods supported by this introspection endpoint.
+     */
+    introspection_endpoint_auth_methods_supported?: string[];
+    /**
+     * JSON array containing a list of the JWS signing
+     * algorithms ("alg" values) supported by the introspection endpoint
+     * for the signature on the JWT [JWT] used to authenticate the client
+     * at the introspection endpoint for the "private_key_jwt" and
+     * "client_secret_jwt" authentication methods.
+     */
+    introspection_endpoint_auth_signing_alg_values_supported?: string[];
+    /**
+     * URL that the OpenID Provider provides to the person registering the Client
+     * to read about the OP's requirements on how the Relying Party can use the data provided by the OP.
+     */
+    op_policy_uri?: string;
+    /**
+     * URL that the OpenID Provider provides to the person registering the Client
+     * to read about OpenID Provider's terms of service.
+     */
+    op_tos_uri?: string;
+    /**
+     * JSON array containing a list of the JWE encryption algorithms (alg values)
+     * supported by the OP for Request Objects.
+     */
+    request_object_encryption_alg_values_supported?: string[];
+    /**
+     * JSON array containing a list of the JWE encryption algorithms (enc values)
+     * supported by the OP for Request Objects.
+     */
+    request_object_encryption_enc_values_supported?: string[];
+    /**
+     * JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for Request Objects
+     */
+    request_object_signing_alg_values_supported?: string[];
+    /**
+     * Boolean value specifying whether the OP supports use of the request parameter,
+     * with true indicating support. If omitted, the default value is false.
+     */
+    request_parameter_supported?: boolean;
+    /**
+     * Boolean value specifying whether the OP supports use of the request_uri parameter,
+     * with true indicating support. If omitted, the default value is true.
+     */
+    request_uri_parameter_supported?: boolean;
+    /**
+     * Boolean value specifying whether the OP requires any request_uri values used to be
+     * pre-registered using the request_uris registration parameter.
+     */
+    require_request_uri_registration?: boolean;
+    /**
+     * Supported OAuth 2.0 response_mode values.
+     *
+     * @remarks
+     * Determines how the authorization response is returned:
+     * - 'query' - Parameters in URL query string
+     * - 'fragment' - Parameters in URL fragment
+     * - 'form_post' - Parameters via POST
+     */
+    response_modes_supported?: string[];
+    /**
+     * Supported OAuth 2.0 response_type values.
+     *
+     * @remarks
+     * Common values include:
+     * - 'code' - Authorization Code flow
+     * - 'token' - Implicit flow
+     * - 'id_token' - OIDC implicit flow
+     * - 'code token' - Hybrid flow
+     */
+    response_types_supported?: string[];
+    /**
+     * JSON array containing a list of client authentication
+     * methods supported by this revocation endpoint.
+     */
+    revocation_endpoint_auth_methods_supported?: string[];
+    /**
+     * JSON array containing a list of the JWS signing
+     * algorithms ("alg" values) supported by the revocation endpoint for
+     * the signature on the JWT [JWT] used to authenticate the client at
+     * the revocation endpoint for the "private_key_jwt" and
+     * "client_secret_jwt" authentication methods.
+     */
+    revocation_endpoint_auth_signing_alg_values_supported?: string[];
+    /**
+     * Supported OAuth 2.0 scope values.
+     * Lists the permission scopes this server can handle.
+     *
+     * @remarks
+     * Common values include:
+     * - 'openid' - Required for OIDC flows
+     * - 'profile' - Basic user information
+     * - 'email' - User's email address
+     * - 'address' - User's postal address
+     * - 'phone' - User's phone number
+     */
+    scopes_supported?: string[];
+    /**
+     * URL of a page containing human-readable information that developers
+     * might want or need to know when using the OpenID Provider.
+     */
+    service_documentation?: string;
+    /**
+     * Supported Subject Identifier types.
+     * Defines how the OP identifies users across sessions.
+     *
+     * @remarks
+     * Common values:
+     * - 'public' - Same sub value for all clients
+     * - 'pairwise' - Different sub values for different clients
+     */
+    subject_types_supported?: string[];
+    /**
+     * JSON array containing a list of Client Authentication methods supported by this Token Endpoint.
+     */
+    token_endpoint_auth_methods_supported?: string[];
+    /**
+     * JSON array containing a list of the JWS signing algorithms (alg values) supported by the Token Endpoint
+     * for the signature on the JWT [JWT] used to authenticate the Client at the Token Endpoint for the
+     * private_key_jwt and client_secret_jwt authentication methods.
+     */
+    token_endpoint_auth_signing_alg_values_supported?: string[];
+    /**
+     * Languages and scripts supported for the user interface,
+     * represented as a JSON array of BCP47 [RFC5646] language tag values.
+     */
+    ui_locales_supported?: string[];
+    /**
+     * JSON array containing a list of the JWE [JWE] encryption algorithms (alg values)
+     * [JWA] supported by the UserInfo Endpoint to encode the Claims in a JWT [JWT].
+     */
+    userinfo_encryption_alg_values_supported?: string[];
+    /**
+     * JSON array containing a list of the JWE encryption algorithms (enc values) [JWA]
+     * supported by the UserInfo Endpoint to encode the Claims in a JWT [JWT]
+     */
+    userinfo_encryption_enc_values_supported?: string[];
+    /**
+     * JSON array containing a list of the JWS [JWS] signing algorithms (alg values) [JWA]
+     * supported by the UserInfo Endpoint to encode the Claims in a JWT [JWT].
+     */
+    userinfo_signing_alg_values_supported?: string[];
+}
+/**
+ * Essential OpenID Connect (OIDC) Provider endpoints configuration.
+ * This interface represents the core set of endpoints that an OpenID Provider
+ * must expose for basic OIDC functionality.
+ *
+ * @remarks
+ * These endpoints form the foundation of OIDC operations and are organized into categories:
+ * 1. Authentication Flow - Authorization and token endpoints
+ * 2. User Data - UserInfo and session management
+ * 3. Security - Key management and token operations
+ * 4. Session Management - Logout and session state
+ *
+ * While all fields are optional in the interface, an OIDC Provider typically
+ * implements most of these endpoints for full OIDC compliance.
+ *
+ * @see {@link OIDCDiscoveryApiResponse} For the complete provider metadata
+ * @see {@link https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata Provider Metadata Specification}
+ *
+ * @example
+ * ```typescript
+ * const endpoints: OIDCDiscoveryEndpointsApiResponse = {
+ *   issuer: "https://identity.example.com",
+ *   authorization_endpoint: "https://identity.example.com/oauth2/authorize",
+ *   token_endpoint: "https://identity.example.com/oauth2/token",
+ *   userinfo_endpoint: "https://identity.example.com/oauth2/userinfo"
+ * };
+ * ```
+ */
+export interface OIDCDiscoveryEndpointsApiResponse {
+    /**
+     * OAuth 2.0 Authorization Endpoint URL.
+     * Used to initiate the authentication and authorization process.
+     *
+     * @remarks
+     * The client redirects the user to this endpoint to begin the auth flow.
+     * Supports various response_type values for different OAuth 2.0 flows.
+     */
+    authorization_endpoint?: string;
+    /**
+     * URL of an OP iframe that supports cross-origin communications for session state information with the RP
+     * Client, using the HTML5 postMessage API.
+     */
+    check_session_iframe?: string;
+    /**
+     * URL at the OP to which an RP can perform a redirect to request that the End-User be logged out at the
+     * OP.
+     */
+    end_session_endpoint?: string;
+    /**
+     * URL of the authorization server's OAuth 2.0
+     * introspection endpoint.
+     */
+    introspection_endpoint?: string;
+    /**
+     * HTTPS URL that the OP asserts as its Issuer Identifier.
+     * Must not contain query or fragment components.
+     *
+     * @remarks
+     * This is a crucial identifier for the OpenID Provider and should
+     * match the iss claim in issued JWT tokens.
+     */
+    issuer?: string;
+    /**
+     * JSON Web Key Set (JWKS) document URL.
+     * Contains the cryptographic keys used to secure communications.
+     *
+     * @remarks
+     * Used by clients to:
+     * - Validate signatures on JWT tokens
+     * - Encrypt requests to the OP
+     * - Establish secure communications
+     */
+    jwks_uri?: string;
+    /**
+     * Dynamic Client Registration Endpoint URL.
+     * Allows automated registration of OAuth 2.0 clients.
+     *
+     * @remarks
+     * If supported, enables automated client setup and configuration.
+     * May require initial authentication or access tokens.
+     */
+    registration_endpoint?: string;
+    /**
+     * URL of the authorization server's OAuth 2.0 revocation
+     * endpoint.
+     */
+    revocation_endpoint?: string;
+    /**
+     * OAuth 2.0 Token Endpoint URL.
+     * Used to obtain tokens using various grant types.
+     *
+     * @remarks
+     * Clients use this endpoint to exchange authorization codes for tokens
+     * and to refresh expired access tokens.
+     */
+    token_endpoint?: string;
+    /**
+     * UserInfo Endpoint URL.
+     * Returns claims about the authenticated end-user.
+     *
+     * @remarks
+     * Requires a valid access token with appropriate scope.
+     * May return claims in JWT format if signing/encryption is configured.
+     */
+    userinfo_endpoint?: string;
+}
+//# sourceMappingURL=oidc-discovery.d.ts.map

package/dist/models/oidc-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-discovery.d.ts","sourceRoot":"","sources":["../../src/models/oidc-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iCAAiC;IACjF;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhC;;;OAGG;IACH,oCAAoC,CAAC,EAAE,OAAO,CAAC;IAE/C;;;OAGG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IAEvC;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjC;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;OAIG;IACH,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5C;;OAEG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC;;;;;;;;;OASG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjC;;;OAGG;IACH,wCAAwC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpD;;;OAGG;IACH,wCAAwC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpD;;;OAGG;IACH,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjD;;;OAGG;IACH,6CAA6C,CAAC,EAAE,MAAM,EAAE,CAAC;IAEzD;;;;;;OAMG;IACH,wDAAwD,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpE;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,8CAA8C,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1D;;;OAGG;IACH,8CAA8C,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1D;;OAEG;IACH,2CAA2C,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvD;;;OAGG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAEtC;;;OAGG;IACH,+BAA+B,CAAC,EAAE,OAAO,CAAC;IAE1C;;;OAGG;IACH,gCAAgC,CAAC,EAAE,OAAO,CAAC;IAE3C;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC;;;;;;;;;OASG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC;;;OAGG;IACH,0CAA0C,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtD;;;;;;OAMG;IACH,qDAAqD,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjE;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;;;;OAQG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnC;;OAEG;IACH,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjD;;;;OAIG;IACH,gDAAgD,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5D;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhC;;;OAGG;IACH,wCAAwC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpD;;;OAGG;IACH,wCAAwC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpD;;;OAGG;IACH,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;CAClD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,iCAAiC;IAChD;;;;;;;OAOG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAKhC;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAKxB;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B"}

package/dist/models/oidc-endpoints.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * @deprecated Use the properties defined in the new `OIDCEndpoints` at the `/models/oidc-endpoints.ts` instead.
+ * FIXME: Remove this once the final refactoring is done.
+ */
+export interface LegacyOIDCEndpoints {
+    authorizationEndpoint: string;
+    checkSessionIframe: string;
+    endSessionEndpoint: string;
+    introspectionEndpoint?: string;
+    jwksUri: string;
+    registrationEndpoint?: string;
+    revocationEndpoint: string;
+    tokenEndpoint: string;
+    userinfoEndpoint: string;
+    wellKnown?: string;
+}
+/**
+ * Interface representing OpenID Connect endpoints configuration.
+ * FIXME: Remove the temporary extends of legacy OIDC endpoints.
+ */
+export interface OIDCEndpoints extends Partial<LegacyOIDCEndpoints> {
+    /**
+     * The authorization endpoint URL where the authentication request is sent
+     */
+    authorization: string;
+    /**
+     * The OpenID Provider's discovery endpoint URL
+     */
+    discovery: string;
+    /**
+     * The end session endpoint URL used to terminate the user's session
+     */
+    endSession: string;
+    /**
+     * The introspection endpoint URL used to validate tokens
+     */
+    introspection: string;
+    /**
+     * The issuer identifier URL for the OpenID Provider
+     */
+    issuer: string;
+    /**
+     * The JSON Web Key Set endpoint URL that provides the public keys to verify tokens
+     */
+    jwks: string;
+    /**
+     * The revocation endpoint URL used to revoke access or refresh tokens
+     */
+    revocation: string;
+    /**
+     * The userinfo endpoint URL that returns claims about the authenticated user
+     */
+    userinfo: string;
+}
+//# sourceMappingURL=oidc-endpoints.d.ts.map

package/dist/models/oidc-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-endpoints.d.ts","sourceRoot":"","sources":["../../src/models/oidc-endpoints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,OAAO,CAAC,mBAAmB,CAAC;IACjE;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/models/organization.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export interface Organization {
+    id: string;
+    name: string;
+    orgHandle: string;
+    ref?: string;
+    status?: string;
+}
+/**
+ * Interface for paginated organization response.
+ */
+export interface AllOrganizationsApiResponse {
+    hasMore?: boolean;
+    nextCursor?: string;
+    organizations: Organization[];
+    totalCount?: number;
+}
+//# sourceMappingURL=organization.d.ts.map

package/dist/models/organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.d.ts","sourceRoot":"","sources":["../../src/models/organization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/models/platforms.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Enumeration of supported identity platforms.
+ *
+ * - `ThunderID`: Represents the ThunderID cloud identity platform (asgardeo.io domains).
+ * - `IdentityServer`: Represents WSO2 Identity Server (on-prem or custom domains).
+ * - `Unknown`: Used when the platform cannot be determined from the configuration.
+ *
+ * This enum is used to distinguish between different identity providers and to
+ * enable platform-specific logic throughout the SDK.
+ */
+export declare enum Platform {
+    /** ThunderID cloud identity platform (asgardeo.io domains) */
+    ThunderID = "THUNDERID",
+    /** @experimental ThunderID V2 */
+    ThunderIDV2 = "ThunderIDV2",
+    /** WSO2 Identity Server (on-prem or custom domains) */
+    IdentityServer = "IDENTITY_SERVER",
+    /** Unknown or unsupported platform */
+    Unknown = "UNKNOWN"
+}
+//# sourceMappingURL=platforms.d.ts.map

package/dist/models/platforms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platforms.d.ts","sourceRoot":"","sources":["../../src/models/platforms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;GASG;AACH,oBAAY,QAAQ;IAClB,8DAA8D;IAC9D,SAAS,cAAc;IACvB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,uDAAuD;IACvD,cAAc,oBAAoB;IAClC,sCAAsC;IACtC,OAAO,YAAY;CACpB"}

package/dist/models/scim2-schema.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export interface SchemaAttribute {
+    caseExact: boolean;
+    description?: string;
+    displayName?: string;
+    displayOrder?: string;
+    multiValued: boolean;
+    mutability: string;
+    name: string;
+    regEx?: string;
+    required?: boolean;
+    returned: string;
+    sharedProfileValueResolvingMethod?: string;
+    subAttributes?: SchemaAttribute[];
+    supportedByDefault?: string;
+    type: string;
+    uniqueness: string;
+}
+/**
+ * Represents a SCIM2 schema definition
+ */
+export interface Schema {
+    /** Schema attributes */
+    attributes: SchemaAttribute[];
+    /** Schema description */
+    description: string;
+    /** Schema identifier */
+    id: string;
+    /** Schema name */
+    name: string;
+}
+export interface FlattenedSchema extends Schema {
+    schemaId: string;
+}
+/**
+ * Well-known SCIM2 schema IDs
+ */
+export declare enum WellKnownSchemaIds {
+    /** Core Schema */
+    Core = "urn:ietf:params:scim:schemas:core:2.0",
+    /** Custom User Schema */
+    CustomUser = "urn:scim:schemas:extension:custom:User",
+    /** Enterprise User Schema */
+    EnterpriseUser = "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User",
+    /** System User Schema */
+    SystemUser = "urn:scim:wso2:schema",
+    /** User Schema */
+    User = "urn:ietf:params:scim:schemas:core:2.0:User"
+}
+//# sourceMappingURL=scim2-schema.d.ts.map

package/dist/models/scim2-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scim2-schema.d.ts","sourceRoot":"","sources":["../../src/models/scim2-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,aAAa,CAAC,EAAE,eAAe,EAAE,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,wBAAwB;IACxB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAgB,SAAQ,MAAM;IAC7C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,kBAAkB;IAClB,IAAI,0CAA0C;IAC9C,yBAAyB;IACzB,UAAU,2CAA2C;IACrD,6BAA6B;IAC7B,cAAc,+DAA+D;IAC7E,yBAAyB;IACzB,UAAU,yBAAyB;IACnC,kBAAkB;IAClB,IAAI,+CAA+C;CACpD"}

package/dist/models/session.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export interface SessionData {
+    access_token: string;
+    created_at: number;
+    expires_in: string;
+    id_token: string;
+    refresh_token?: string;
+    scope: string;
+    session_state: string;
+    token_type: string;
+}
+export interface UserSession {
+    scopes: string[];
+    sessionState: string;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/models/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/models/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB"}