@thunderid/javascript 1.6.0 → 1.8.0

package/dist/constants/AdministrationConstants.d.ts

@@ -0,0 +1,86 @@
+/**
+ * How an operation that changes state is carried out.
+ *
+ * - `flow`: run the administration flow the server configures for the operation, which handles the
+ *   runtime side first (for example revoking tokens and ending sessions) and then changes the record.
+ *   When no flow is configured for the operation, the management API is called directly.
+ * - `native`: call the management API directly, with no flow. The default.
+ */
+declare const AdministrationModes: {
+    FLOW: 'flow';
+    NATIVE: 'native';
+};
+/**
+ * Keys of the `flow` server-config section that name the administration flow for each operation. An
+ * unset key is the opt-out: the operation calls the management API directly.
+ */
+export declare const AdministrationFlowConfigKey: {
+    ACTION_DELETION: 'actionDeletionFlow';
+    AGENT_SUSPEND: 'agentSuspendFlow';
+    AGENT_UNLOCK: 'agentUnlockFlow';
+    AGENT_UNSUSPEND: 'agentUnsuspendFlow';
+    APPLICATION_DELETION: 'applicationDeletionFlow';
+    APPLICATION_SUSPEND: 'applicationSuspendFlow';
+    APPLICATION_UNSUSPEND: 'applicationUnsuspendFlow';
+    GROUP_DELETION: 'groupDeletionFlow';
+    GROUP_MEMBERSHIP_REMOVAL: 'groupMembershipRemovalFlow';
+    ROLE_ASSIGNMENT_REMOVAL: 'roleAssignmentRemovalFlow';
+    ROLE_DELETION: 'roleDeletionFlow';
+    ROLE_PERMISSION_REMOVAL: 'rolePermissionRemovalFlow';
+    SECRET_REGENERATION: 'secretRegenerationFlow';
+    USER_DELETION: 'userDeletionFlow';
+    USER_SUSPEND: 'userSuspendFlow';
+    USER_UNLOCK: 'userUnlockFlow';
+    USER_UNSUSPEND: 'userUnsuspendFlow';
+};
+/**
+ * The `flow` server-config key naming the flow of each account lifecycle action, by the kind of identity it
+ * acts on. Applications are never locked, so they have no unlock.
+ */
+export declare const AccountLifecycleFlowConfigKey: {
+    agent: {
+        suspend: 'agentSuspendFlow';
+        unlock: 'agentUnlockFlow';
+        unsuspend: 'agentUnsuspendFlow';
+    };
+    application: {
+        suspend: 'applicationSuspendFlow';
+        unsuspend: 'applicationUnsuspendFlow';
+    };
+    user: {
+        suspend: 'userSuspendFlow';
+        unlock: 'userUnlockFlow';
+        unsuspend: 'userUnsuspendFlow';
+    };
+};
+/**
+ * Names of the inputs an administration flow reads. They avoid the execution request's top-level names
+ * so a value cannot land in the wrong place.
+ */
+export declare const AdministrationFlowInput: {
+    ACTION: 'targetActionId';
+    APPLICATION: 'targetApplicationId';
+    ASSIGNEE: 'targetAssigneeId';
+    GROUP: 'targetGroupId';
+    MEMBER: 'targetMemberId';
+    OPERATOR_NOTE: 'operatorNote';
+    PERMISSIONS: 'targetPermissions';
+    RESOURCE: 'targetResourceId';
+    RESOURCE_SERVER: 'targetResourceServerId';
+    ROLE: 'targetRoleId';
+    SUBJECT: 'subject';
+};
+/**
+ * Keys of the values an administration flow returns. A regenerated client secret is readable only
+ * here. `emailSent` is `"false"` when a best-effort email step sent nothing.
+ */
+export declare const AdministrationFlowData: {
+    CLIENT_SECRET: 'clientSecret';
+    EMAIL_SENT: 'emailSent';
+};
+/**
+ * Flow type of every administration flow.
+ */
+export declare const ADMINISTRATION_FLOW_TYPE = "ADMINISTRATION";
+export default AdministrationModes;
+//# sourceMappingURL=AdministrationConstants.d.ts.map

package/dist/constants/AdministrationConstants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AdministrationConstants.d.ts","sourceRoot":"","sources":["../../src/constants/AdministrationConstants.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,QAAA,MAAM,mBAAmB,EAAE;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,CAAC;CAIlB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE;IACxC,eAAe,EAAE,oBAAoB,CAAC;IACtC,aAAa,EAAE,kBAAkB,CAAC;IAClC,YAAY,EAAE,iBAAiB,CAAC;IAChC,eAAe,EAAE,oBAAoB,CAAC;IACtC,oBAAoB,EAAE,yBAAyB,CAAC;IAChD,mBAAmB,EAAE,wBAAwB,CAAC;IAC9C,qBAAqB,EAAE,0BAA0B,CAAC;IAClD,cAAc,EAAE,mBAAmB,CAAC;IACpC,wBAAwB,EAAE,4BAA4B,CAAC;IACvD,uBAAuB,EAAE,2BAA2B,CAAC;IACrD,aAAa,EAAE,kBAAkB,CAAC;IAClC,uBAAuB,EAAE,2BAA2B,CAAC;IACrD,mBAAmB,EAAE,wBAAwB,CAAC;IAC9C,aAAa,EAAE,kBAAkB,CAAC;IAClC,YAAY,EAAE,iBAAiB,CAAC;IAChC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,cAAc,EAAE,mBAAmB,CAAC;CAmBrC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,EAAE;IAC1C,KAAK,EAAE;QAAC,OAAO,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,iBAAiB,CAAC;QAAC,SAAS,EAAE,oBAAoB,CAAA;KAAC,CAAC;IACjG,WAAW,EAAE;QAAC,OAAO,EAAE,wBAAwB,CAAC;QAAC,SAAS,EAAE,0BAA0B,CAAA;KAAC,CAAC;IACxF,IAAI,EAAE;QAAC,OAAO,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE,mBAAmB,CAAA;KAAC,CAAC;CAgB9F,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE;IACpC,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,qBAAqB,CAAC;IACnC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,aAAa,EAAE,cAAc,CAAC;IAC9B,WAAW,EAAE,mBAAmB,CAAC;IACjC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,eAAe,EAAE,wBAAwB,CAAC;IAC1C,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,SAAS,CAAC;CAapB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE;IACnC,aAAa,EAAE,cAAc,CAAC;IAC9B,UAAU,EAAE,WAAW,CAAC;CAIzB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,eAAe,mBAAmB,CAAC"}

package/dist/constants/DelegationGrantTypes.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The OAuth grant types that let an agent act on behalf of a signed-in user: authorization code, CIBA
+ * and token exchange. An agent holding any of them is delegated, the rule the server applies when it
+ * checks an agent's grants.
+ */
+declare const DelegationGrantTypes: readonly string[];
+export default DelegationGrantTypes;
+//# sourceMappingURL=DelegationGrantTypes.d.ts.map

package/dist/constants/DelegationGrantTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DelegationGrantTypes.d.ts","sourceRoot":"","sources":["../../src/constants/DelegationGrantTypes.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,QAAA,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAI1C,CAAC;AAEF,eAAe,oBAAoB,CAAC"}