@wix/auto_sdk_data-extension-schema_schemas 1.0.288 → 1.0.290

package/build/cjs/meta.d.ts

@@ -22227,8 +22227,8 @@ type ResponseBodyDecodingWithLiterals = ResponseBodyDecoding | 'BASE64_TEXT';
 declare enum VerificationSource {
     /**
      * One set of material covers every delivery of this connector: a single stored secret for the
-     * HMAC and callback-token methods, or the published key set at public_key_url for PUBLIC_KEY,
-     * where nothing is stored at all. The only legal scope for PUBLIC_KEY.
+     * HMAC and callback-token methods, or the published key set at public_key_url for PUBLIC_KEY
+     * and OIDC_BEARER, where nothing is stored at all. The only legal scope for either.
      */
     CONNECTOR_WIDE = "CONNECTOR_WIDE",
     /**
@@ -22320,10 +22320,17 @@ declare enum VerificationMethod {
      */
     CALLBACK_TOKEN = "CALLBACK_TOKEN",
     /** Authenticity is not established at all. Requires unsigned_deliveries_accepted. */
-    NO_VERIFICATION = "NO_VERIFICATION"
+    NO_VERIFICATION = "NO_VERIFICATION",
+    /**
+     * OIDC bearer JWT in the Authorization header, verified against the key set at
+     * public_key_url with the expected audience, issuer and subject, for example Cloud Pub/Sub
+     * push authentication. Carries no payload binding, the same limitation CALLBACK_TOKEN
+     * documents for itself: it proves the sender's identity, not that the body is intact.
+     */
+    OIDC_BEARER = "OIDC_BEARER"
 }
 /** @enumType */
-type VerificationMethodWithLiterals = VerificationMethod | 'HMAC_SHA256' | 'HMAC_SHA1' | 'PUBLIC_KEY' | 'CALLBACK_TOKEN' | 'NO_VERIFICATION';
+type VerificationMethodWithLiterals = VerificationMethod | 'HMAC_SHA256' | 'HMAC_SHA1' | 'PUBLIC_KEY' | 'CALLBACK_TOKEN' | 'NO_VERIFICATION' | 'OIDC_BEARER';
 /** How a repeated delivery is recognized, so the same event is not processed twice. */
 declare enum ReplayProtection {
     /**
@@ -22371,10 +22378,6 @@ interface NoVerificationConfig {
     /** Always UNSIGNED for this arm. */
     verificationSource?: VerificationSourceWithLiterals;
 }
-/**
- * Not yet selectable: OIDC_BEARER is enum_maturity NOT_IMPLEMENTED and the validator rejects
- * it outright. Shape carries forward the flat oidc_expected_* fields unchanged.
- */
 interface OidcBearerConfig {
     /** Scope of the material used to verify the token. See WebhookConfig.VerificationSource. */
     verificationSource?: VerificationSourceWithLiterals;
@@ -22393,6 +22396,12 @@ interface OidcBearerConfig {
      * @maxLength 2000
      */
     oidcExpectedSubject?: string;
+    /**
+     * Endpoint publishing the provider's public keys, shared with PublicKeyConfig's own field of
+     * the same name.
+     * @maxLength 2000
+     */
+    publicKeyUrl?: string;
 }
 /** Per-strategy payload for the `replay_protection_config` oneof above. */
 interface DeliveryIdHeaderConfig {
@@ -22598,12 +22607,7 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
     callbackTokenConfig?: CallbackTokenConfig;
     /** Payload for NO_VERIFICATION. */
     noVerificationConfig?: NoVerificationConfig;
-    /**
-     * Payload for OIDC_BEARER. Carried even though that method is enum_maturity
-     * NOT_IMPLEMENTED and the validator rejects selecting it: the enum value and its flat
-     * fields (24-26) are already published, so omitting the arm now would mean a second
-     * breaking change once the gate lifts.
-     */
+    /** Payload for OIDC_BEARER. */
     oidcBearerConfig?: OidcBearerConfig;
     /** Payload for DELIVERY_ID_HEADER. */
     deliveryIdHeaderConfig?: DeliveryIdHeaderConfig;
@@ -22720,8 +22724,8 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      */
     callbackTokenHeader?: string;
     /**
-     * Endpoint publishing the provider's public keys. Required for PUBLIC_KEY and must be empty for
-     * every other method.
+     * Endpoint publishing the provider's public keys. Required for PUBLIC_KEY and OIDC_BEARER, and
+     * must be empty for every other method.
      *
      * Deliberately has no (wix.api.format), following revoke_url above: WEB_URL rejects the empty
      * value this field carries for every other method. HTTPS and a parseable endpoint are enforced
@@ -22918,12 +22922,7 @@ interface WebhookConfigVerificationOneOf {
     callbackTokenConfig?: CallbackTokenConfig;
     /** Payload for NO_VERIFICATION. */
     noVerificationConfig?: NoVerificationConfig;
-    /**
-     * Payload for OIDC_BEARER. Carried even though that method is enum_maturity
-     * NOT_IMPLEMENTED and the validator rejects selecting it: the enum value and its flat
-     * fields (24-26) are already published, so omitting the arm now would mean a second
-     * breaking change once the gate lifts.
-     */
+    /** Payload for OIDC_BEARER. */
     oidcBearerConfig?: OidcBearerConfig;
 }
 /** @oneof */

package/build/cjs/meta.js

@@ -3659,6 +3659,7 @@ var VerificationMethod = /* @__PURE__ */ ((VerificationMethod2) => {
   VerificationMethod2["PUBLIC_KEY"] = "PUBLIC_KEY";
   VerificationMethod2["CALLBACK_TOKEN"] = "CALLBACK_TOKEN";
   VerificationMethod2["NO_VERIFICATION"] = "NO_VERIFICATION";
+  VerificationMethod2["OIDC_BEARER"] = "OIDC_BEARER";
   return VerificationMethod2;
 })(VerificationMethod || {});
 var ReplayProtection = /* @__PURE__ */ ((ReplayProtection2) => {