@wix/auto_sdk_data-extension-schema_schemas 1.0.345 → 1.0.346

package/build/internal/cjs/index.typings.d.ts

@@ -26807,6 +26807,27 @@ interface DispatchConfig {
      * @maxSize 20
      */
     requiredHeaders?: RequiredHeader[];
+    /**
+     * RFC 6901 JSON Pointer into a provider response body, selecting the provider's own error code.
+     * Read on every response, whatever its HTTP status. A body that is not JSON, or a pointer that
+     * selects nothing or a non-string, never matches. Slack: "/error".
+     *
+     * Set together with credential_revoked_values, or leave both empty. Empty, the dispatcher reads
+     * no response body for this purpose.
+     * @maxLength 500
+     */
+    credentialRevokedJsonPointer?: string;
+    /**
+     * Values at credential_revoked_json_pointer that mean the stored credential is dead for every
+     * binding that shares it. Exact, case-sensitive. A match is a signal, not a verdict: the
+     * dispatcher confirms it with a forced refresh, or with the connector's identity_operation for a
+     * credential that cannot be refreshed, before anything is marked. Slack: "account_inactive",
+     * "token_revoked". Never list a code the provider also returns for a live token.
+     * @maxSize 20
+     * @minLength 1
+     * @maxLength 100
+     */
+    credentialRevokedValues?: string[];
 }
 /**
  * Declares how a provider webhook delivery is verified and classified. Every field describes
@@ -27006,6 +27027,23 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      * rejected only at the host, not at write time.
      */
     batchConfig?: BatchConfig;
+    /**
+     * RFC 6901 JSON Pointer to a string in the body of the provider's endpoint-ownership check.
+     * Slack: "/challenge", from its url_verification request, which Slack sends when a Request URL
+     * is saved and which carries no team_id.
+     *
+     * When set, a delivery that passed verification on the CONNECTOR_WIDE path and has a non-empty
+     * string at the pointer is answered with HTTP 200 and that string as a text/plain body. It is
+     * not routed, not published, and marks nothing revoked.
+     *
+     * Legal only with CONNECTOR_WIDE material and a verification method whose signature covers the
+     * body: HMAC_SHA256, HMAC_SHA1 or PUBLIC_KEY. CALLBACK_TOKEN and OIDC_BEARER carry no payload
+     * binding and NO_VERIFICATION proves nothing, so with them the endpoint could echo a value it
+     * has not verified. The host ignores the field otherwise. Empty, the default, means the
+     * connector has no such check.
+     * @maxLength 500
+     */
+    endpointChallengeJsonPointer?: string;
 }
 /** @oneof */
 interface WebhookConfigVerificationOneOf {

package/build/internal/cjs/meta.d.ts

@@ -26893,6 +26893,27 @@ interface DispatchConfig {
      * @maxSize 20
      */
     requiredHeaders?: RequiredHeader[];
+    /**
+     * RFC 6901 JSON Pointer into a provider response body, selecting the provider's own error code.
+     * Read on every response, whatever its HTTP status. A body that is not JSON, or a pointer that
+     * selects nothing or a non-string, never matches. Slack: "/error".
+     *
+     * Set together with credential_revoked_values, or leave both empty. Empty, the dispatcher reads
+     * no response body for this purpose.
+     * @maxLength 500
+     */
+    credentialRevokedJsonPointer?: string;
+    /**
+     * Values at credential_revoked_json_pointer that mean the stored credential is dead for every
+     * binding that shares it. Exact, case-sensitive. A match is a signal, not a verdict: the
+     * dispatcher confirms it with a forced refresh, or with the connector's identity_operation for a
+     * credential that cannot be refreshed, before anything is marked. Slack: "account_inactive",
+     * "token_revoked". Never list a code the provider also returns for a live token.
+     * @maxSize 20
+     * @minLength 1
+     * @maxLength 100
+     */
+    credentialRevokedValues?: string[];
 }
 /**
  * Declares how a provider webhook delivery is verified and classified. Every field describes
@@ -27092,6 +27113,23 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      * rejected only at the host, not at write time.
      */
     batchConfig?: BatchConfig;
+    /**
+     * RFC 6901 JSON Pointer to a string in the body of the provider's endpoint-ownership check.
+     * Slack: "/challenge", from its url_verification request, which Slack sends when a Request URL
+     * is saved and which carries no team_id.
+     *
+     * When set, a delivery that passed verification on the CONNECTOR_WIDE path and has a non-empty
+     * string at the pointer is answered with HTTP 200 and that string as a text/plain body. It is
+     * not routed, not published, and marks nothing revoked.
+     *
+     * Legal only with CONNECTOR_WIDE material and a verification method whose signature covers the
+     * body: HMAC_SHA256, HMAC_SHA1 or PUBLIC_KEY. CALLBACK_TOKEN and OIDC_BEARER carry no payload
+     * binding and NO_VERIFICATION proves nothing, so with them the endpoint could echo a value it
+     * has not verified. The host ignores the field otherwise. Empty, the default, means the
+     * connector has no such check.
+     * @maxLength 500
+     */
+    endpointChallengeJsonPointer?: string;
 }
 /** @oneof */
 interface WebhookConfigVerificationOneOf {

package/build/internal/es/index.typings.d.mts

@@ -26807,6 +26807,27 @@ interface DispatchConfig {
      * @maxSize 20
      */
     requiredHeaders?: RequiredHeader[];
+    /**
+     * RFC 6901 JSON Pointer into a provider response body, selecting the provider's own error code.
+     * Read on every response, whatever its HTTP status. A body that is not JSON, or a pointer that
+     * selects nothing or a non-string, never matches. Slack: "/error".
+     *
+     * Set together with credential_revoked_values, or leave both empty. Empty, the dispatcher reads
+     * no response body for this purpose.
+     * @maxLength 500
+     */
+    credentialRevokedJsonPointer?: string;
+    /**
+     * Values at credential_revoked_json_pointer that mean the stored credential is dead for every
+     * binding that shares it. Exact, case-sensitive. A match is a signal, not a verdict: the
+     * dispatcher confirms it with a forced refresh, or with the connector's identity_operation for a
+     * credential that cannot be refreshed, before anything is marked. Slack: "account_inactive",
+     * "token_revoked". Never list a code the provider also returns for a live token.
+     * @maxSize 20
+     * @minLength 1
+     * @maxLength 100
+     */
+    credentialRevokedValues?: string[];
 }
 /**
  * Declares how a provider webhook delivery is verified and classified. Every field describes
@@ -27006,6 +27027,23 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      * rejected only at the host, not at write time.
      */
     batchConfig?: BatchConfig;
+    /**
+     * RFC 6901 JSON Pointer to a string in the body of the provider's endpoint-ownership check.
+     * Slack: "/challenge", from its url_verification request, which Slack sends when a Request URL
+     * is saved and which carries no team_id.
+     *
+     * When set, a delivery that passed verification on the CONNECTOR_WIDE path and has a non-empty
+     * string at the pointer is answered with HTTP 200 and that string as a text/plain body. It is
+     * not routed, not published, and marks nothing revoked.
+     *
+     * Legal only with CONNECTOR_WIDE material and a verification method whose signature covers the
+     * body: HMAC_SHA256, HMAC_SHA1 or PUBLIC_KEY. CALLBACK_TOKEN and OIDC_BEARER carry no payload
+     * binding and NO_VERIFICATION proves nothing, so with them the endpoint could echo a value it
+     * has not verified. The host ignores the field otherwise. Empty, the default, means the
+     * connector has no such check.
+     * @maxLength 500
+     */
+    endpointChallengeJsonPointer?: string;
 }
 /** @oneof */
 interface WebhookConfigVerificationOneOf {

package/build/internal/es/meta.d.mts

@@ -26893,6 +26893,27 @@ interface DispatchConfig {
      * @maxSize 20
      */
     requiredHeaders?: RequiredHeader[];
+    /**
+     * RFC 6901 JSON Pointer into a provider response body, selecting the provider's own error code.
+     * Read on every response, whatever its HTTP status. A body that is not JSON, or a pointer that
+     * selects nothing or a non-string, never matches. Slack: "/error".
+     *
+     * Set together with credential_revoked_values, or leave both empty. Empty, the dispatcher reads
+     * no response body for this purpose.
+     * @maxLength 500
+     */
+    credentialRevokedJsonPointer?: string;
+    /**
+     * Values at credential_revoked_json_pointer that mean the stored credential is dead for every
+     * binding that shares it. Exact, case-sensitive. A match is a signal, not a verdict: the
+     * dispatcher confirms it with a forced refresh, or with the connector's identity_operation for a
+     * credential that cannot be refreshed, before anything is marked. Slack: "account_inactive",
+     * "token_revoked". Never list a code the provider also returns for a live token.
+     * @maxSize 20
+     * @minLength 1
+     * @maxLength 100
+     */
+    credentialRevokedValues?: string[];
 }
 /**
  * Declares how a provider webhook delivery is verified and classified. Every field describes
@@ -27092,6 +27113,23 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
      * rejected only at the host, not at write time.
      */
     batchConfig?: BatchConfig;
+    /**
+     * RFC 6901 JSON Pointer to a string in the body of the provider's endpoint-ownership check.
+     * Slack: "/challenge", from its url_verification request, which Slack sends when a Request URL
+     * is saved and which carries no team_id.
+     *
+     * When set, a delivery that passed verification on the CONNECTOR_WIDE path and has a non-empty
+     * string at the pointer is answered with HTTP 200 and that string as a text/plain body. It is
+     * not routed, not published, and marks nothing revoked.
+     *
+     * Legal only with CONNECTOR_WIDE material and a verification method whose signature covers the
+     * body: HMAC_SHA256, HMAC_SHA1 or PUBLIC_KEY. CALLBACK_TOKEN and OIDC_BEARER carry no payload
+     * binding and NO_VERIFICATION proves nothing, so with them the endpoint could echo a value it
+     * has not verified. The host ignores the field otherwise. Empty, the default, means the
+     * connector has no such check.
+     * @maxLength 500
+     */
+    endpointChallengeJsonPointer?: string;
 }
 /** @oneof */
 interface WebhookConfigVerificationOneOf {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/auto_sdk_data-extension-schema_schemas",
-  "version": "1.0.345",
+  "version": "1.0.346",
   "license": "MIT",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -50,5 +50,5 @@
       "fqdn": "wix.data_extensions.v1.data_extension_schema"
     }
   },
-  "falconPackageHash": "d7997e373d9180f8ef30857df127c21b8d8aded88da02ca560d9b349"
+  "falconPackageHash": "ae1085877cabcf1b634e9172a1205cca766ec74ced8131973d42562d"
 }