@wix/auto_sdk_data-extension-schema_schemas 1.0.344 → 1.0.346

package/build/internal/cjs/index.typings.d.ts

@@ -26787,14 +26787,14 @@ interface DispatchConfig {
      */
     responseBodyFieldJsonPointers?: string[];
     /**
-     * Provider origins the connector may call, each with its own allowed path prefixes. Replaces
-     * base_url and allowed_path_prefixes.
-     *
-     * An origin is scheme, host and optional port, with no path. With one origin, a caller may omit
-     * the origin selector; with several, the caller names the origin on each request, never by path
-     * matching, because two origins can share a path prefix (Dropbox serves "/2/files/" on both
-     * api.dropboxapi.com and content.dropboxapi.com). allowed_methods and the response settings
-     * apply to every origin.
+     * Provider origins the connector may call, each with its own allowed path prefixes. When
+     * origins is not empty, base_url and allowed_path_prefixes are not read. Without
+     * provider_origin, a request goes to the one origin whose prefixes contain its path; a path no
+     * origin allows is refused. Two origins can share a prefix (Dropbox serves "/2/files/" on both
+     * api.dropboxapi.com and content.dropboxapi.com), so a path several origins allow is refused
+     * with an error naming provider_origin. A named provider_origin must equal a declared origin
+     * whose prefixes contain the path. When origins is empty, base_url is the only origin, with
+     * allowed_path_prefixes. allowed_methods and response settings apply to every origin.
      * @maxSize 5
      */
     origins?: DispatchOrigin[];
@@ -26807,6 +26807,27 @@ interface DispatchConfig {
      * @maxSize 20
      */
     requiredHeaders?: RequiredHeader[];
+    /**
+     * RFC 6901 JSON Pointer into a provider response body, selecting the provider's own error code.
+     * Read on every response, whatever its HTTP status. A body that is not JSON, or a pointer that
+     * selects nothing or a non-string, never matches. Slack: "/error".
+     *
+     * Set together with credential_revoked_values, or leave both empty. Empty, the dispatcher reads
+     * no response body for this purpose.
+     * @maxLength 500
+     */
+    credentialRevokedJsonPointer?: string;
+    /**
+     * Values at credential_revoked_json_pointer that mean the stored credential is dead for every
+     * binding that shares it. Exact, case-sensitive. A match is a signal, not a verdict: the
+     * dispatcher confirms it with a forced refresh, or with the connector's identity_operation for a
+     * credential that cannot be refreshed, before anything is marked. Slack: "account_inactive",
+     * "token_revoked". Never list a code the provider also returns for a live token.
+     * @maxSize 20
+     * @minLength 1
+     * @maxLength 100
+     */
+    credentialRevokedValues?: string[];
 }
 /**
  * Declares how a provider webhook delivery is verified and classified. Every field describes
@@ -27006,6 +27027,23 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      * rejected only at the host, not at write time.
      */
     batchConfig?: BatchConfig;
+    /**
+     * RFC 6901 JSON Pointer to a string in the body of the provider's endpoint-ownership check.
+     * Slack: "/challenge", from its url_verification request, which Slack sends when a Request URL
+     * is saved and which carries no team_id.
+     *
+     * When set, a delivery that passed verification on the CONNECTOR_WIDE path and has a non-empty
+     * string at the pointer is answered with HTTP 200 and that string as a text/plain body. It is
+     * not routed, not published, and marks nothing revoked.
+     *
+     * Legal only with CONNECTOR_WIDE material and a verification method whose signature covers the
+     * body: HMAC_SHA256, HMAC_SHA1 or PUBLIC_KEY. CALLBACK_TOKEN and OIDC_BEARER carry no payload
+     * binding and NO_VERIFICATION proves nothing, so with them the endpoint could echo a value it
+     * has not verified. The host ignores the field otherwise. Empty, the default, means the
+     * connector has no such check.
+     * @maxLength 500
+     */
+    endpointChallengeJsonPointer?: string;
 }
 /** @oneof */
 interface WebhookConfigVerificationOneOf {

package/build/internal/cjs/meta.d.ts

@@ -26873,14 +26873,14 @@ interface DispatchConfig {
      */
     responseBodyFieldJsonPointers?: string[];
     /**
-     * Provider origins the connector may call, each with its own allowed path prefixes. Replaces
-     * base_url and allowed_path_prefixes.
-     *
-     * An origin is scheme, host and optional port, with no path. With one origin, a caller may omit
-     * the origin selector; with several, the caller names the origin on each request, never by path
-     * matching, because two origins can share a path prefix (Dropbox serves "/2/files/" on both
-     * api.dropboxapi.com and content.dropboxapi.com). allowed_methods and the response settings
-     * apply to every origin.
+     * Provider origins the connector may call, each with its own allowed path prefixes. When
+     * origins is not empty, base_url and allowed_path_prefixes are not read. Without
+     * provider_origin, a request goes to the one origin whose prefixes contain its path; a path no
+     * origin allows is refused. Two origins can share a prefix (Dropbox serves "/2/files/" on both
+     * api.dropboxapi.com and content.dropboxapi.com), so a path several origins allow is refused
+     * with an error naming provider_origin. A named provider_origin must equal a declared origin
+     * whose prefixes contain the path. When origins is empty, base_url is the only origin, with
+     * allowed_path_prefixes. allowed_methods and response settings apply to every origin.
      * @maxSize 5
      */
     origins?: DispatchOrigin[];
@@ -26893,6 +26893,27 @@ interface DispatchConfig {
      * @maxSize 20
      */
     requiredHeaders?: RequiredHeader[];
+    /**
+     * RFC 6901 JSON Pointer into a provider response body, selecting the provider's own error code.
+     * Read on every response, whatever its HTTP status. A body that is not JSON, or a pointer that
+     * selects nothing or a non-string, never matches. Slack: "/error".
+     *
+     * Set together with credential_revoked_values, or leave both empty. Empty, the dispatcher reads
+     * no response body for this purpose.
+     * @maxLength 500
+     */
+    credentialRevokedJsonPointer?: string;
+    /**
+     * Values at credential_revoked_json_pointer that mean the stored credential is dead for every
+     * binding that shares it. Exact, case-sensitive. A match is a signal, not a verdict: the
+     * dispatcher confirms it with a forced refresh, or with the connector's identity_operation for a
+     * credential that cannot be refreshed, before anything is marked. Slack: "account_inactive",
+     * "token_revoked". Never list a code the provider also returns for a live token.
+     * @maxSize 20
+     * @minLength 1
+     * @maxLength 100
+     */
+    credentialRevokedValues?: string[];
 }
 /**
  * Declares how a provider webhook delivery is verified and classified. Every field describes
@@ -27092,6 +27113,23 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      * rejected only at the host, not at write time.
      */
     batchConfig?: BatchConfig;
+    /**
+     * RFC 6901 JSON Pointer to a string in the body of the provider's endpoint-ownership check.
+     * Slack: "/challenge", from its url_verification request, which Slack sends when a Request URL
+     * is saved and which carries no team_id.
+     *
+     * When set, a delivery that passed verification on the CONNECTOR_WIDE path and has a non-empty
+     * string at the pointer is answered with HTTP 200 and that string as a text/plain body. It is
+     * not routed, not published, and marks nothing revoked.
+     *
+     * Legal only with CONNECTOR_WIDE material and a verification method whose signature covers the
+     * body: HMAC_SHA256, HMAC_SHA1 or PUBLIC_KEY. CALLBACK_TOKEN and OIDC_BEARER carry no payload
+     * binding and NO_VERIFICATION proves nothing, so with them the endpoint could echo a value it
+     * has not verified. The host ignores the field otherwise. Empty, the default, means the
+     * connector has no such check.
+     * @maxLength 500
+     */
+    endpointChallengeJsonPointer?: string;
 }
 /** @oneof */
 interface WebhookConfigVerificationOneOf {

package/build/internal/es/index.typings.d.mts

@@ -26787,14 +26787,14 @@ interface DispatchConfig {
      */
     responseBodyFieldJsonPointers?: string[];
     /**
-     * Provider origins the connector may call, each with its own allowed path prefixes. Replaces
-     * base_url and allowed_path_prefixes.
-     *
-     * An origin is scheme, host and optional port, with no path. With one origin, a caller may omit
-     * the origin selector; with several, the caller names the origin on each request, never by path
-     * matching, because two origins can share a path prefix (Dropbox serves "/2/files/" on both
-     * api.dropboxapi.com and content.dropboxapi.com). allowed_methods and the response settings
-     * apply to every origin.
+     * Provider origins the connector may call, each with its own allowed path prefixes. When
+     * origins is not empty, base_url and allowed_path_prefixes are not read. Without
+     * provider_origin, a request goes to the one origin whose prefixes contain its path; a path no
+     * origin allows is refused. Two origins can share a prefix (Dropbox serves "/2/files/" on both
+     * api.dropboxapi.com and content.dropboxapi.com), so a path several origins allow is refused
+     * with an error naming provider_origin. A named provider_origin must equal a declared origin
+     * whose prefixes contain the path. When origins is empty, base_url is the only origin, with
+     * allowed_path_prefixes. allowed_methods and response settings apply to every origin.
      * @maxSize 5
      */
     origins?: DispatchOrigin[];
@@ -26807,6 +26807,27 @@ interface DispatchConfig {
      * @maxSize 20
      */
     requiredHeaders?: RequiredHeader[];
+    /**
+     * RFC 6901 JSON Pointer into a provider response body, selecting the provider's own error code.
+     * Read on every response, whatever its HTTP status. A body that is not JSON, or a pointer that
+     * selects nothing or a non-string, never matches. Slack: "/error".
+     *
+     * Set together with credential_revoked_values, or leave both empty. Empty, the dispatcher reads
+     * no response body for this purpose.
+     * @maxLength 500
+     */
+    credentialRevokedJsonPointer?: string;
+    /**
+     * Values at credential_revoked_json_pointer that mean the stored credential is dead for every
+     * binding that shares it. Exact, case-sensitive. A match is a signal, not a verdict: the
+     * dispatcher confirms it with a forced refresh, or with the connector's identity_operation for a
+     * credential that cannot be refreshed, before anything is marked. Slack: "account_inactive",
+     * "token_revoked". Never list a code the provider also returns for a live token.
+     * @maxSize 20
+     * @minLength 1
+     * @maxLength 100
+     */
+    credentialRevokedValues?: string[];
 }
 /**
  * Declares how a provider webhook delivery is verified and classified. Every field describes
@@ -27006,6 +27027,23 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      * rejected only at the host, not at write time.
      */
     batchConfig?: BatchConfig;
+    /**
+     * RFC 6901 JSON Pointer to a string in the body of the provider's endpoint-ownership check.
+     * Slack: "/challenge", from its url_verification request, which Slack sends when a Request URL
+     * is saved and which carries no team_id.
+     *
+     * When set, a delivery that passed verification on the CONNECTOR_WIDE path and has a non-empty
+     * string at the pointer is answered with HTTP 200 and that string as a text/plain body. It is
+     * not routed, not published, and marks nothing revoked.
+     *
+     * Legal only with CONNECTOR_WIDE material and a verification method whose signature covers the
+     * body: HMAC_SHA256, HMAC_SHA1 or PUBLIC_KEY. CALLBACK_TOKEN and OIDC_BEARER carry no payload
+     * binding and NO_VERIFICATION proves nothing, so with them the endpoint could echo a value it
+     * has not verified. The host ignores the field otherwise. Empty, the default, means the
+     * connector has no such check.
+     * @maxLength 500
+     */
+    endpointChallengeJsonPointer?: string;
 }
 /** @oneof */
 interface WebhookConfigVerificationOneOf {

package/build/internal/es/meta.d.mts

@@ -26873,14 +26873,14 @@ interface DispatchConfig {
      */
     responseBodyFieldJsonPointers?: string[];
     /**
-     * Provider origins the connector may call, each with its own allowed path prefixes. Replaces
-     * base_url and allowed_path_prefixes.
-     *
-     * An origin is scheme, host and optional port, with no path. With one origin, a caller may omit
-     * the origin selector; with several, the caller names the origin on each request, never by path
-     * matching, because two origins can share a path prefix (Dropbox serves "/2/files/" on both
-     * api.dropboxapi.com and content.dropboxapi.com). allowed_methods and the response settings
-     * apply to every origin.
+     * Provider origins the connector may call, each with its own allowed path prefixes. When
+     * origins is not empty, base_url and allowed_path_prefixes are not read. Without
+     * provider_origin, a request goes to the one origin whose prefixes contain its path; a path no
+     * origin allows is refused. Two origins can share a prefix (Dropbox serves "/2/files/" on both
+     * api.dropboxapi.com and content.dropboxapi.com), so a path several origins allow is refused
+     * with an error naming provider_origin. A named provider_origin must equal a declared origin
+     * whose prefixes contain the path. When origins is empty, base_url is the only origin, with
+     * allowed_path_prefixes. allowed_methods and response settings apply to every origin.
      * @maxSize 5
      */
     origins?: DispatchOrigin[];
@@ -26893,6 +26893,27 @@ interface DispatchConfig {
      * @maxSize 20
      */
     requiredHeaders?: RequiredHeader[];
+    /**
+     * RFC 6901 JSON Pointer into a provider response body, selecting the provider's own error code.
+     * Read on every response, whatever its HTTP status. A body that is not JSON, or a pointer that
+     * selects nothing or a non-string, never matches. Slack: "/error".
+     *
+     * Set together with credential_revoked_values, or leave both empty. Empty, the dispatcher reads
+     * no response body for this purpose.
+     * @maxLength 500
+     */
+    credentialRevokedJsonPointer?: string;
+    /**
+     * Values at credential_revoked_json_pointer that mean the stored credential is dead for every
+     * binding that shares it. Exact, case-sensitive. A match is a signal, not a verdict: the
+     * dispatcher confirms it with a forced refresh, or with the connector's identity_operation for a
+     * credential that cannot be refreshed, before anything is marked. Slack: "account_inactive",
+     * "token_revoked". Never list a code the provider also returns for a live token.
+     * @maxSize 20
+     * @minLength 1
+     * @maxLength 100
+     */
+    credentialRevokedValues?: string[];
 }
 /**
  * Declares how a provider webhook delivery is verified and classified. Every field describes
@@ -27092,6 +27113,23 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      * rejected only at the host, not at write time.
      */
     batchConfig?: BatchConfig;
+    /**
+     * RFC 6901 JSON Pointer to a string in the body of the provider's endpoint-ownership check.
+     * Slack: "/challenge", from its url_verification request, which Slack sends when a Request URL
+     * is saved and which carries no team_id.
+     *
+     * When set, a delivery that passed verification on the CONNECTOR_WIDE path and has a non-empty
+     * string at the pointer is answered with HTTP 200 and that string as a text/plain body. It is
+     * not routed, not published, and marks nothing revoked.
+     *
+     * Legal only with CONNECTOR_WIDE material and a verification method whose signature covers the
+     * body: HMAC_SHA256, HMAC_SHA1 or PUBLIC_KEY. CALLBACK_TOKEN and OIDC_BEARER carry no payload
+     * binding and NO_VERIFICATION proves nothing, so with them the endpoint could echo a value it
+     * has not verified. The host ignores the field otherwise. Empty, the default, means the
+     * connector has no such check.
+     * @maxLength 500
+     */
+    endpointChallengeJsonPointer?: string;
 }
 /** @oneof */
 interface WebhookConfigVerificationOneOf {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/auto_sdk_data-extension-schema_schemas",
-  "version": "1.0.344",
+  "version": "1.0.346",
   "license": "MIT",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -50,5 +50,5 @@
       "fqdn": "wix.data_extensions.v1.data_extension_schema"
     }
   },
-  "falconPackageHash": "b274e74678f3db5d18574196e6c95b0cc737887e614f47bc0563eddb"
+  "falconPackageHash": "ae1085877cabcf1b634e9172a1205cca766ec74ced8131973d42562d"
 }