@wix/auto_sdk_identity_authentication 1.0.3 → 1.0.5

package/build/es/src/iam-authentication-v1-authentication-authentication.public.js

@@ -35,5 +35,5 @@ export function verify(httpClient) {
     // @ts-ignore
     { httpClient });
 }
-export { AddressTag, EmailTag, FactorStatus, FactorType, MfaReason, PhoneTag, PrivacyStatus, Reason, StateType, Status, StatusName, TenantType, } from './iam-authentication-v1-authentication-authentication.universal.js';
+export { AddressTag, EmailTag, FactorStatus, FactorType, MfaReason, PhoneTag, PrivacyStatus, Reason, StateType, Status, StatusName, TenantType, UserVerificationRequirement, } from './iam-authentication-v1-authentication-authentication.universal.js';
 //# sourceMappingURL=iam-authentication-v1-authentication-authentication.public.js.map

package/build/es/src/iam-authentication-v1-authentication-authentication.public.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam-authentication-v1-authentication-authentication.public.js","sourceRoot":"","sources":["../../../src/iam-authentication-v1-authentication-authentication.public.ts"],"names":[],"mappings":"AACA,OAAO,EAeL,cAAc,IAAI,uBAAuB,EACzC,aAAa,IAAI,sBAAsB,EACvC,OAAO,IAAI,gBAAgB,EAC3B,MAAM,IAAI,eAAe,EACzB,UAAU,IAAI,mBAAmB,EACjC,MAAM,IAAI,eAAe,EACzB,MAAM,IAAI,eAAe,GAC1B,MAAM,oEAAoE,CAAC;AAE5E,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;AAE5D,MAAM,UAAU,UAAU,CAAC,UAAsB;IAC/C,OAAO,CAAC,OAAgB,EAAE,OAA2B,EAAE,EAAE,CACvD,mBAAmB,CACjB,OAAO,EACP,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAmBD,MAAM,UAAU,OAAO,CAAC,UAAsB;IAC5C,OAAO,CAAC,OAAgB,EAAE,OAAwB,EAAE,EAAE,CACpD,gBAAgB,CACd,OAAO,EACP,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAgBD,MAAM,UAAU,cAAc,CAC5B,UAAsB;IAEtB,OAAO,CAAC,WAAmB,EAAE,EAAE,CAC7B,uBAAuB,CACrB,WAAW;IACX,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAUD,MAAM,UAAU,aAAa,CAAC,UAAsB;IAClD,OAAO,CAAC,OAA8B,EAAE,EAAE,CACxC,sBAAsB,CACpB,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AASD,MAAM,UAAU,MAAM,CAAC,UAAsB;IAC3C,OAAO,CAAC,OAAgB,EAAE,OAAuB,EAAE,EAAE,CACnD,eAAe,CACb,OAAO,EACP,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AASD,MAAM,UAAU,MAAM,CAAC,UAAsB;IAC3C,OAAO,CAAC,OAAuB,EAAE,EAAE,CACjC,eAAe,CACb,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAWD,MAAM,UAAU,MAAM,CAAC,UAAsB;IAC3C,OAAO,CAAC,UAAsB,EAAE,OAAuB,EAAE,EAAE,CACzD,eAAe,CACb,UAAU,EACV,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AASD,OAAO,EAEL,UAAU,EAeV,QAAQ,EAGR,YAAY,EACZ,UAAU,EAmBV,SAAS,EAGT,QAAQ,EACR,aAAa,EAOb,MAAM,EAaN,SAAS,EACT,MAAM,EACN,UAAU,EAEV,UAAU,GAaX,MAAM,oEAAoE,CAAC"}
+{"version":3,"file":"iam-authentication-v1-authentication-authentication.public.js","sourceRoot":"","sources":["../../../src/iam-authentication-v1-authentication-authentication.public.ts"],"names":[],"mappings":"AACA,OAAO,EAYL,cAAc,IAAI,uBAAuB,EACzC,aAAa,IAAI,sBAAsB,EACvC,OAAO,IAAI,gBAAgB,EAC3B,MAAM,IAAI,eAAe,EACzB,UAAU,IAAI,mBAAmB,EACjC,MAAM,IAAI,eAAe,EACzB,MAAM,IAAI,eAAe,GAC1B,MAAM,oEAAoE,CAAC;AAE5E,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;AAE5D,MAAM,UAAU,UAAU,CAAC,UAAsB;IAC/C,OAAO,CAAC,OAAgB,EAAE,OAA2B,EAAE,EAAE,CACvD,mBAAmB,CACjB,OAAO,EACP,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAoBD,MAAM,UAAU,OAAO,CAAC,UAAsB;IAC5C,OAAO,CAAC,OAAgB,EAAE,OAAwB,EAAE,EAAE,CACpD,gBAAgB,CACd,OAAO,EACP,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAiBD,MAAM,UAAU,cAAc,CAC5B,UAAsB;IAEtB,OAAO,CAAC,WAAmB,EAAE,EAAE,CAC7B,uBAAuB,CACrB,WAAW;IACX,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAUD,MAAM,UAAU,aAAa,CAAC,UAAsB;IAClD,OAAO,CAAC,OAA8B,EAAE,EAAE,CACxC,sBAAsB,CACpB,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAOD,MAAM,UAAU,MAAM,CAAC,UAAsB;IAC3C,OAAO,CAAC,OAAgB,EAAE,OAAuB,EAAE,EAAE,CACnD,eAAe,CACb,OAAO,EACP,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAUD,MAAM,UAAU,MAAM,CAAC,UAAsB;IAC3C,OAAO,CAAC,OAAuB,EAAE,EAAE,CACjC,eAAe,CACb,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AASD,MAAM,UAAU,MAAM,CAAC,UAAsB;IAC3C,OAAO,CAAC,UAAsB,EAAE,OAAuB,EAAE,EAAE,CACzD,eAAe,CACb,UAAU,EACV,OAAO;IACP,aAAa;IACb,EAAE,UAAU,EAAE,CACf,CAAC;AACN,CAAC;AAUD,OAAO,EAEL,UAAU,EAiBV,QAAQ,EAGR,YAAY,EACZ,UAAU,EAmBV,SAAS,EAGT,QAAQ,EACR,aAAa,EAOb,MAAM,EAWN,SAAS,EACT,MAAM,EACN,UAAU,EAEV,UAAU,EAEV,2BAA2B,GAa5B,MAAM,oEAAoE,CAAC"}

package/build/es/src/iam-authentication-v1-authentication-authentication.types.d.ts

@@ -392,7 +392,9 @@ export declare enum FactorType {
     /** Requires authentication via an authenticator app. */
     TOTP = "TOTP",
     /** Requires authentication via a push notification. */
-    PUSH = "PUSH"
+    PUSH = "PUSH",
+    /** Requires authentication via WebAuthn/passkey. */
+    WEBAUTHN = "WEBAUTHN"
 }
 export declare enum Status {
     /** Factor requires activation. */
@@ -479,12 +481,14 @@ export interface MfaChallengeData {
 }
 export interface VerificationChallenge extends VerificationChallengeFactorChallengeDataOneOf {
     pushData?: PushChallengeData;
+    webauthnData?: WebAuthnChallengeData;
     /** @maxLength 200 */
     hint?: string | null;
 }
 /** @oneof */
 export interface VerificationChallengeFactorChallengeDataOneOf {
     pushData?: PushChallengeData;
+    webauthnData?: WebAuthnChallengeData;
 }
 export interface PushChallengeData {
     /**
@@ -494,6 +498,99 @@ export interface PushChallengeData {
      */
     transactionId?: string;
 }
+export interface WebAuthnChallengeData {
+    /**
+     * A unique identifier for this challenge that will be used to correlate
+     * the authentication response with this challenge.
+     * This should be a cryptographically random GUID to prevent guessing attacks.
+     * @format GUID
+     */
+    challengeId?: string;
+    /**
+     * The challenge that will be signed by the authenticator during the WebAuthn authentication ceremony.
+     * This should be a cryptographically secure random value with at least 16 bytes of entropy.
+     * The value is used to prevent replay attacks and MUST be randomly generated by the implementer.
+     */
+    challenge?: Uint8Array;
+    /**
+     * The timeout in milliseconds for the WebAuthn authentication ceremony.
+     * After this time, the challenge will be considered expired and the authentication will need to be restarted.
+     * This is optional and may be overridden by the client if provided.
+     * The WebAuthn spec recommends a timeout of at least 1 minute (60000ms).
+     */
+    timeoutMs?: number | null;
+    /**
+     * Optional list of credentials that are acceptable for this authentication ceremony.
+     * If empty, all credentials associated with the user will be considered.
+     * @maxSize 10
+     */
+    allowCredentials?: PublicKeyCredentialDescriptor[];
+    /** Specifies the requirement for user verification during the authentication ceremony. */
+    userVerification?: UserVerificationRequirement;
+    /**
+     * Optional hints to guide the client UI
+     * Examples include "security-key" to emphasize external authenticators
+     * or "client-device" to emphasize built-in authenticators
+     * @maxLength 50
+     * @maxSize 10
+     */
+    hints?: string[];
+    /**
+     * Optional extensions for the authentication ceremony
+     * Provides additional parameters for specialized WebAuthn functionality
+     */
+    extensions?: AuthenticationExtensionInputs;
+}
+export interface PublicKeyCredentialDescriptor {
+    /** The credential ID */
+    id?: Uint8Array;
+    /**
+     * An optional hint as to the transports used by the credential
+     * Examples include "usb", "nfc", "ble", "internal", "hybrid"
+     * @maxLength 50
+     * @maxSize 10
+     */
+    transports?: string[];
+}
+export declare enum UserVerificationRequirement {
+    /** Default unspecified value */
+    USER_VERIFICATION_UNSPECIFIED = "USER_VERIFICATION_UNSPECIFIED",
+    /**
+     * The Relying Party requires user verification and will fail the operation if the response doesn't have the UV flag
+     * set
+     */
+    USER_VERIFICATION_REQUIRED = "USER_VERIFICATION_REQUIRED",
+    /** The Relying Party prefers user verification but will not fail the operation if unavailable */
+    USER_VERIFICATION_PREFERRED = "USER_VERIFICATION_PREFERRED",
+    /** The Relying Party does not want user verification employed (e.g., to minimize disruption to the user experience) */
+    USER_VERIFICATION_DISCOURAGED = "USER_VERIFICATION_DISCOURAGED"
+}
+export interface AuthenticationExtensionInputs extends AuthenticationExtensionInputsLargeBlobOperationOneOf {
+    /** Read existing large blob data from the authenticator */
+    largeBlobRead?: boolean;
+    /** Write data to the authenticator's large blob storage */
+    largeBlobWrite?: Uint8Array;
+    /**
+     * FIDO AppID Extension (appid)
+     * An AppID that was used for previously registered U2F authenticators
+     * This makes already-registered U2F credentials forward-compatible with the WebAuthn API
+     * @maxLength 256
+     */
+    appid?: string;
+    /**
+     * User Verification Method Extension (uvm)
+     * Requests the authenticator to report which verification methods were used
+     * Examples include fingerprint, PIN, or facial recognition
+     */
+    uvm?: boolean;
+}
+/** @oneof */
+export interface AuthenticationExtensionInputsLargeBlobOperationOneOf {
+    /** Read existing large blob data from the authenticator */
+    largeBlobRead?: boolean;
+    /** Write data to the authenticator's large blob storage */
+    largeBlobWrite?: Uint8Array;
+}
 export interface LoginV2Request {
     /** Identifier of identity logging in. */
     loginId: LoginId;
@@ -664,111 +761,3 @@ export interface PushVerifyData {
     /** @maxLength 36 */
     transactionId?: string | null;
 }
-interface V1FactorNonNullableFields {
-    factorType: FactorType;
-    factorStatus: FactorStatus;
-}
-interface RequireMfaDataNonNullableFields {
-    availableFactors: V1FactorNonNullableFields[];
-    reason: MfaReason;
-}
-interface PushChallengeDataNonNullableFields {
-    transactionId: string;
-}
-interface VerificationChallengeNonNullableFields {
-    pushData?: PushChallengeDataNonNullableFields;
-}
-interface MfaChallengeDataNonNullableFields {
-    factorType: FactorType;
-    verificationChallengeData?: VerificationChallengeNonNullableFields;
-    availableFactors: V1FactorNonNullableFields[];
-    reason: MfaReason;
-}
-interface IdpConnectionNonNullableFields {
-    idpConnectionId: string;
-    idpUserId: string;
-}
-interface AuthenticatorConnectionNonNullableFields {
-    authenticatorConnectionId: string;
-    reEnrollmentRequired: boolean;
-}
-interface ConnectionNonNullableFields {
-    idpConnection?: IdpConnectionNonNullableFields;
-    authenticatorConnection?: AuthenticatorConnectionNonNullableFields;
-}
-interface V1ListValueNonNullableFields {
-    value: V1CustomValueNonNullableFields[];
-}
-interface V1CustomValueNonNullableFields {
-    strValue: string;
-    numValue: number;
-    listValue?: V1ListValueNonNullableFields;
-}
-interface CustomFieldNonNullableFields {
-    name: string;
-    value?: V1CustomValueNonNullableFields;
-}
-interface SecondaryEmailNonNullableFields {
-    email: string;
-    tag: EmailTag;
-}
-interface PhoneNonNullableFields {
-    phone: string;
-    tag: PhoneTag;
-}
-interface AddressWrapperNonNullableFields {
-    tag: AddressTag;
-}
-interface IdentityProfileNonNullableFields {
-    emails: string[];
-    phones: string[];
-    labels: string[];
-    privacyStatus: PrivacyStatus;
-    customFields: CustomFieldNonNullableFields[];
-    secondaryEmails: SecondaryEmailNonNullableFields[];
-    phonesV2: PhoneNonNullableFields[];
-    addresses: AddressWrapperNonNullableFields[];
-}
-interface MetadataNonNullableFields {
-    tags: string[];
-}
-interface EmailNonNullableFields {
-    address: string;
-    isVerified: boolean;
-}
-interface StatusV2NonNullableFields {
-    name: StatusName;
-    reasons: Reason[];
-}
-interface FactorNonNullableFields {
-    factorId: string;
-    type: FactorType;
-    status: Status;
-}
-interface IdentityNonNullableFields {
-    connections: ConnectionNonNullableFields[];
-    identityProfile?: IdentityProfileNonNullableFields;
-    metadata?: MetadataNonNullableFields;
-    email?: EmailNonNullableFields;
-    status?: StatusV2NonNullableFields;
-    factors: FactorNonNullableFields[];
-}
-export interface StateMachineResponseNonNullableFields {
-    requireMfaData?: RequireMfaDataNonNullableFields;
-    mfaChallengeData?: MfaChallengeDataNonNullableFields;
-    state: StateType;
-    identity?: IdentityNonNullableFields;
-}
-interface HeadersEntryNonNullableFields {
-    key: string;
-    value: string;
-}
-export interface RawHttpResponseNonNullableFields {
-    body: Uint8Array;
-    headers: HeadersEntryNonNullableFields[];
-}
-export interface SignOnResponseNonNullableFields {
-    sessionToken: string;
-    identity?: IdentityNonNullableFields;
-}
-export {};

package/build/es/src/iam-authentication-v1-authentication-authentication.types.js

@@ -75,6 +75,8 @@ export var FactorType;
     FactorType["TOTP"] = "TOTP";
     /** Requires authentication via a push notification. */
     FactorType["PUSH"] = "PUSH";
+    /** Requires authentication via WebAuthn/passkey. */
+    FactorType["WEBAUTHN"] = "WEBAUTHN";
 })(FactorType || (FactorType = {}));
 export var Status;
 (function (Status) {
@@ -102,6 +104,20 @@ export var MfaReason;
     /** Mfa is required due to high risk login */
     MfaReason["HIGH_RISK_LOGIN"] = "HIGH_RISK_LOGIN";
 })(MfaReason || (MfaReason = {}));
+export var UserVerificationRequirement;
+(function (UserVerificationRequirement) {
+    /** Default unspecified value */
+    UserVerificationRequirement["USER_VERIFICATION_UNSPECIFIED"] = "USER_VERIFICATION_UNSPECIFIED";
+    /**
+     * The Relying Party requires user verification and will fail the operation if the response doesn't have the UV flag
+     * set
+     */
+    UserVerificationRequirement["USER_VERIFICATION_REQUIRED"] = "USER_VERIFICATION_REQUIRED";
+    /** The Relying Party prefers user verification but will not fail the operation if unavailable */
+    UserVerificationRequirement["USER_VERIFICATION_PREFERRED"] = "USER_VERIFICATION_PREFERRED";
+    /** The Relying Party does not want user verification employed (e.g., to minimize disruption to the user experience) */
+    UserVerificationRequirement["USER_VERIFICATION_DISCOURAGED"] = "USER_VERIFICATION_DISCOURAGED";
+})(UserVerificationRequirement || (UserVerificationRequirement = {}));
 export var TenantType;
 (function (TenantType) {
     TenantType["UNKNOWN_TENANT_TYPE"] = "UNKNOWN_TENANT_TYPE";

package/build/es/src/iam-authentication-v1-authentication-authentication.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam-authentication-v1-authentication-authentication.types.js","sourceRoot":"","sources":["../../../src/iam-authentication-v1-authentication-authentication.types.ts"],"names":[],"mappings":"AAoGA,MAAM,CAAN,IAAY,aAOX;AAPD,WAAY,aAAa;IACvB,iCAAiC;IACjC,wCAAuB,CAAA;IACvB,+FAA+F;IAC/F,kCAAiB,CAAA;IACjB,uDAAuD;IACvD,oCAAmB,CAAA;AACrB,CAAC,EAPW,aAAa,KAAb,aAAa,QAOxB;AA4DD,MAAM,CAAN,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,yBAAa,CAAA;AACf,CAAC,EALW,QAAQ,KAAR,QAAQ,QAKnB;AAiBD,MAAM,CAAN,IAAY,QAOX;AAPD,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,yBAAa,CAAA;IACb,uBAAW,CAAA;AACb,CAAC,EAPW,QAAQ,KAAR,QAAQ,QAOnB;AA4BD,MAAM,CAAN,IAAY,UAMX;AAND,WAAY,UAAU;IACpB,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,2BAAa,CAAA;IACb,iCAAmB,CAAA;IACnB,mCAAqB,CAAA;AACvB,CAAC,EANW,UAAU,KAAV,UAAU,QAMrB;AAsCD,MAAM,CAAN,IAAY,SAWX;AAXD,WAAY,SAAS;IACnB,6BAA6B;IAC7B,4CAA+B,CAAA;IAC/B,oCAAoC;IACpC,gCAAmB,CAAA;IACnB,+EAA+E;IAC/E,8DAAiD,CAAA;IACjD,6DAA6D;IAC7D,sEAAyD,CAAA;IACzD,uIAAuI;IACvI,0CAA6B,CAAA;AAC/B,CAAC,EAXW,SAAS,KAAT,SAAS,QAWpB;AA2GD,MAAM,CAAN,IAAY,UAOX;AAPD,WAAY,UAAU;IACpB,+CAAiC,CAAA;IACjC,iCAAmB,CAAA;IACnB,+BAAiB,CAAA;IACjB,iCAAmB,CAAA;IACnB,iCAAmB,CAAA;IACnB,iCAAmB,CAAA;AACrB,CAAC,EAPW,UAAU,KAAV,UAAU,QAOrB;AAED,MAAM,CAAN,IAAY,MAIX;AAJD,WAAY,MAAM;IAChB,2CAAiC,CAAA;IACjC,6EAAmE,CAAA;IACnE,qFAA2E,CAAA;AAC7E,CAAC,EAJW,MAAM,KAAN,MAAM,QAIjB;AAcD,MAAM,CAAN,IAAY,UAeX;AAfD,WAAY,UAAU;IACpB,2BAA2B;IAC3B,yDAA2C,CAAA;IAC3C,2BAA2B;IAC3B,mCAAqB,CAAA;IACrB,oCAAoC;IACpC,yBAAW,CAAA;IACX,0CAA0C;IAC1C,2BAAa,CAAA;IACb,qCAAqC;IACrC,6BAAe,CAAA;IACf,wDAAwD;IACxD,2BAAa,CAAA;IACb,uDAAuD;IACvD,2BAAa,CAAA;AACf,CAAC,EAfW,UAAU,KAAV,UAAU,QAerB;AAED,MAAM,CAAN,IAAY,MAOX;AAPD,WAAY,MAAM;IAChB,kCAAkC;IAClC,+BAAqB,CAAA;IACrB,2DAA2D;IAC3D,2BAAiB,CAAA;IACjB,oGAAoG;IACpG,+CAAqC,CAAA;AACvC,CAAC,EAPW,MAAM,KAAN,MAAM,QAOjB;AAwDD,MAAM,CAAN,IAAY,YAOX;AAPD,WAAY,YAAY;IACtB,+DAA+C,CAAA;IAC/C,mCAAmB,CAAA;IACnB,yDAAyC,CAAA;IACzC,qDAAqC,CAAA;IACrC,mDAAmC,CAAA;IACnC,qDAAqC,CAAA;AACvC,CAAC,EAPW,YAAY,KAAZ,YAAY,QAOvB;AAED,MAAM,CAAN,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,sDAAyC,CAAA;IACzC,2CAA2C;IAC3C,4CAA+B,CAAA;IAC/B,6CAA6C;IAC7C,gDAAmC,CAAA;AACrC,CAAC,EANW,SAAS,KAAT,SAAS,QAMpB;AA+ED,MAAM,CAAN,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,yDAA2C,CAAA;IAC3C,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,2BAAa,CAAA;AACf,CAAC,EALW,UAAU,KAAV,UAAU,QAKrB"}
+{"version":3,"file":"iam-authentication-v1-authentication-authentication.types.js","sourceRoot":"","sources":["../../../src/iam-authentication-v1-authentication-authentication.types.ts"],"names":[],"mappings":"AAoGA,MAAM,CAAN,IAAY,aAOX;AAPD,WAAY,aAAa;IACvB,iCAAiC;IACjC,wCAAuB,CAAA;IACvB,+FAA+F;IAC/F,kCAAiB,CAAA;IACjB,uDAAuD;IACvD,oCAAmB,CAAA;AACrB,CAAC,EAPW,aAAa,KAAb,aAAa,QAOxB;AA4DD,MAAM,CAAN,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,yBAAa,CAAA;AACf,CAAC,EALW,QAAQ,KAAR,QAAQ,QAKnB;AAiBD,MAAM,CAAN,IAAY,QAOX;AAPD,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,yBAAa,CAAA;IACb,uBAAW,CAAA;AACb,CAAC,EAPW,QAAQ,KAAR,QAAQ,QAOnB;AA4BD,MAAM,CAAN,IAAY,UAMX;AAND,WAAY,UAAU;IACpB,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,2BAAa,CAAA;IACb,iCAAmB,CAAA;IACnB,mCAAqB,CAAA;AACvB,CAAC,EANW,UAAU,KAAV,UAAU,QAMrB;AAsCD,MAAM,CAAN,IAAY,SAWX;AAXD,WAAY,SAAS;IACnB,6BAA6B;IAC7B,4CAA+B,CAAA;IAC/B,oCAAoC;IACpC,gCAAmB,CAAA;IACnB,+EAA+E;IAC/E,8DAAiD,CAAA;IACjD,6DAA6D;IAC7D,sEAAyD,CAAA;IACzD,uIAAuI;IACvI,0CAA6B,CAAA;AAC/B,CAAC,EAXW,SAAS,KAAT,SAAS,QAWpB;AA2GD,MAAM,CAAN,IAAY,UAOX;AAPD,WAAY,UAAU;IACpB,+CAAiC,CAAA;IACjC,iCAAmB,CAAA;IACnB,+BAAiB,CAAA;IACjB,iCAAmB,CAAA;IACnB,iCAAmB,CAAA;IACnB,iCAAmB,CAAA;AACrB,CAAC,EAPW,UAAU,KAAV,UAAU,QAOrB;AAED,MAAM,CAAN,IAAY,MAIX;AAJD,WAAY,MAAM;IAChB,2CAAiC,CAAA;IACjC,6EAAmE,CAAA;IACnE,qFAA2E,CAAA;AAC7E,CAAC,EAJW,MAAM,KAAN,MAAM,QAIjB;AAcD,MAAM,CAAN,IAAY,UAiBX;AAjBD,WAAY,UAAU;IACpB,2BAA2B;IAC3B,yDAA2C,CAAA;IAC3C,2BAA2B;IAC3B,mCAAqB,CAAA;IACrB,oCAAoC;IACpC,yBAAW,CAAA;IACX,0CAA0C;IAC1C,2BAAa,CAAA;IACb,qCAAqC;IACrC,6BAAe,CAAA;IACf,wDAAwD;IACxD,2BAAa,CAAA;IACb,uDAAuD;IACvD,2BAAa,CAAA;IACb,oDAAoD;IACpD,mCAAqB,CAAA;AACvB,CAAC,EAjBW,UAAU,KAAV,UAAU,QAiBrB;AAED,MAAM,CAAN,IAAY,MAOX;AAPD,WAAY,MAAM;IAChB,kCAAkC;IAClC,+BAAqB,CAAA;IACrB,2DAA2D;IAC3D,2BAAiB,CAAA;IACjB,oGAAoG;IACpG,+CAAqC,CAAA;AACvC,CAAC,EAPW,MAAM,KAAN,MAAM,QAOjB;AAwDD,MAAM,CAAN,IAAY,YAOX;AAPD,WAAY,YAAY;IACtB,+DAA+C,CAAA;IAC/C,mCAAmB,CAAA;IACnB,yDAAyC,CAAA;IACzC,qDAAqC,CAAA;IACrC,mDAAmC,CAAA;IACnC,qDAAqC,CAAA;AACvC,CAAC,EAPW,YAAY,KAAZ,YAAY,QAOvB;AAED,MAAM,CAAN,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,sDAAyC,CAAA;IACzC,2CAA2C;IAC3C,4CAA+B,CAAA;IAC/B,6CAA6C;IAC7C,gDAAmC,CAAA;AACrC,CAAC,EANW,SAAS,KAAT,SAAS,QAMpB;AA8FD,MAAM,CAAN,IAAY,2BAYX;AAZD,WAAY,2BAA2B;IACrC,gCAAgC;IAChC,8FAA+D,CAAA;IAC/D;;;OAGG;IACH,wFAAyD,CAAA;IACzD,iGAAiG;IACjG,0FAA2D,CAAA;IAC3D,uHAAuH;IACvH,8FAA+D,CAAA;AACjE,CAAC,EAZW,2BAA2B,KAA3B,2BAA2B,QAYtC;AA0ED,MAAM,CAAN,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,yDAA2C,CAAA;IAC3C,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,2BAAa,CAAA;AACf,CAAC,EALW,UAAU,KAAV,UAAU,QAKrB"}

package/build/es/src/iam-authentication-v1-authentication-authentication.universal.d.ts

@@ -1,3 +1,4 @@
+import { NonNullablePaths } from '@wix/sdk-types';
 export interface Authentication {
 }
 export interface RegisterV2Request {
@@ -392,7 +393,9 @@ export declare enum FactorType {
     /** Requires authentication via an authenticator app. */
     TOTP = "TOTP",
     /** Requires authentication via a push notification. */
-    PUSH = "PUSH"
+    PUSH = "PUSH",
+    /** Requires authentication via WebAuthn/passkey. */
+    WEBAUTHN = "WEBAUTHN"
 }
 export declare enum Status {
     /** Factor requires activation. */
@@ -479,12 +482,14 @@ export interface MfaChallengeData {
 }
 export interface VerificationChallenge extends VerificationChallengeFactorChallengeDataOneOf {
     pushData?: PushChallengeData;
+    webauthnData?: WebAuthnChallengeData;
     /** @maxLength 200 */
     hint?: string | null;
 }
 /** @oneof */
 export interface VerificationChallengeFactorChallengeDataOneOf {
     pushData?: PushChallengeData;
+    webauthnData?: WebAuthnChallengeData;
 }
 export interface PushChallengeData {
     /**
@@ -494,6 +499,99 @@ export interface PushChallengeData {
      */
     transactionId?: string;
 }
+export interface WebAuthnChallengeData {
+    /**
+     * A unique identifier for this challenge that will be used to correlate
+     * the authentication response with this challenge.
+     * This should be a cryptographically random GUID to prevent guessing attacks.
+     * @format GUID
+     */
+    challengeId?: string;
+    /**
+     * The challenge that will be signed by the authenticator during the WebAuthn authentication ceremony.
+     * This should be a cryptographically secure random value with at least 16 bytes of entropy.
+     * The value is used to prevent replay attacks and MUST be randomly generated by the implementer.
+     */
+    challenge?: Uint8Array;
+    /**
+     * The timeout in milliseconds for the WebAuthn authentication ceremony.
+     * After this time, the challenge will be considered expired and the authentication will need to be restarted.
+     * This is optional and may be overridden by the client if provided.
+     * The WebAuthn spec recommends a timeout of at least 1 minute (60000ms).
+     */
+    timeoutMs?: number | null;
+    /**
+     * Optional list of credentials that are acceptable for this authentication ceremony.
+     * If empty, all credentials associated with the user will be considered.
+     * @maxSize 10
+     */
+    allowCredentials?: PublicKeyCredentialDescriptor[];
+    /** Specifies the requirement for user verification during the authentication ceremony. */
+    userVerification?: UserVerificationRequirement;
+    /**
+     * Optional hints to guide the client UI
+     * Examples include "security-key" to emphasize external authenticators
+     * or "client-device" to emphasize built-in authenticators
+     * @maxLength 50
+     * @maxSize 10
+     */
+    hints?: string[];
+    /**
+     * Optional extensions for the authentication ceremony
+     * Provides additional parameters for specialized WebAuthn functionality
+     */
+    extensions?: AuthenticationExtensionInputs;
+}
+export interface PublicKeyCredentialDescriptor {
+    /** The credential ID */
+    _id?: Uint8Array;
+    /**
+     * An optional hint as to the transports used by the credential
+     * Examples include "usb", "nfc", "ble", "internal", "hybrid"
+     * @maxLength 50
+     * @maxSize 10
+     */
+    transports?: string[];
+}
+export declare enum UserVerificationRequirement {
+    /** Default unspecified value */
+    USER_VERIFICATION_UNSPECIFIED = "USER_VERIFICATION_UNSPECIFIED",
+    /**
+     * The Relying Party requires user verification and will fail the operation if the response doesn't have the UV flag
+     * set
+     */
+    USER_VERIFICATION_REQUIRED = "USER_VERIFICATION_REQUIRED",
+    /** The Relying Party prefers user verification but will not fail the operation if unavailable */
+    USER_VERIFICATION_PREFERRED = "USER_VERIFICATION_PREFERRED",
+    /** The Relying Party does not want user verification employed (e.g., to minimize disruption to the user experience) */
+    USER_VERIFICATION_DISCOURAGED = "USER_VERIFICATION_DISCOURAGED"
+}
+export interface AuthenticationExtensionInputs extends AuthenticationExtensionInputsLargeBlobOperationOneOf {
+    /** Read existing large blob data from the authenticator */
+    largeBlobRead?: boolean;
+    /** Write data to the authenticator's large blob storage */
+    largeBlobWrite?: Uint8Array;
+    /**
+     * FIDO AppID Extension (appid)
+     * An AppID that was used for previously registered U2F authenticators
+     * This makes already-registered U2F credentials forward-compatible with the WebAuthn API
+     * @maxLength 256
+     */
+    appid?: string;
+    /**
+     * User Verification Method Extension (uvm)
+     * Requests the authenticator to report which verification methods were used
+     * Examples include fingerprint, PIN, or facial recognition
+     */
+    uvm?: boolean;
+}
+/** @oneof */
+export interface AuthenticationExtensionInputsLargeBlobOperationOneOf {
+    /** Read existing large blob data from the authenticator */
+    largeBlobRead?: boolean;
+    /** Write data to the authenticator's large blob storage */
+    largeBlobWrite?: Uint8Array;
+}
 export interface LoginV2Request {
     /** Identifier of identity logging in. */
     loginId: LoginId;
@@ -664,113 +762,6 @@ export interface PushVerifyData {
     /** @maxLength 36 */
     transactionId?: string | null;
 }
-interface V1FactorNonNullableFields {
-    factorType: FactorType;
-    factorStatus: FactorStatus;
-}
-interface RequireMfaDataNonNullableFields {
-    availableFactors: V1FactorNonNullableFields[];
-    reason: MfaReason;
-}
-interface PushChallengeDataNonNullableFields {
-    transactionId: string;
-}
-interface VerificationChallengeNonNullableFields {
-    pushData?: PushChallengeDataNonNullableFields;
-}
-interface MfaChallengeDataNonNullableFields {
-    factorType: FactorType;
-    verificationChallengeData?: VerificationChallengeNonNullableFields;
-    availableFactors: V1FactorNonNullableFields[];
-    reason: MfaReason;
-}
-interface IdpConnectionNonNullableFields {
-    idpConnectionId: string;
-    idpUserId: string;
-}
-interface AuthenticatorConnectionNonNullableFields {
-    authenticatorConnectionId: string;
-    reEnrollmentRequired: boolean;
-}
-interface ConnectionNonNullableFields {
-    idpConnection?: IdpConnectionNonNullableFields;
-    authenticatorConnection?: AuthenticatorConnectionNonNullableFields;
-}
-interface V1ListValueNonNullableFields {
-    value: V1CustomValueNonNullableFields[];
-}
-interface V1CustomValueNonNullableFields {
-    strValue: string;
-    numValue: number;
-    listValue?: V1ListValueNonNullableFields;
-}
-interface CustomFieldNonNullableFields {
-    name: string;
-    value?: V1CustomValueNonNullableFields;
-}
-interface SecondaryEmailNonNullableFields {
-    email: string;
-    tag: EmailTag;
-}
-interface PhoneNonNullableFields {
-    phone: string;
-    tag: PhoneTag;
-}
-interface AddressWrapperNonNullableFields {
-    tag: AddressTag;
-}
-interface IdentityProfileNonNullableFields {
-    emails: string[];
-    phones: string[];
-    labels: string[];
-    privacyStatus: PrivacyStatus;
-    customFields: CustomFieldNonNullableFields[];
-    secondaryEmails: SecondaryEmailNonNullableFields[];
-    phonesV2: PhoneNonNullableFields[];
-    addresses: AddressWrapperNonNullableFields[];
-}
-interface MetadataNonNullableFields {
-    tags: string[];
-}
-interface EmailNonNullableFields {
-    address: string;
-    isVerified: boolean;
-}
-interface StatusV2NonNullableFields {
-    name: StatusName;
-    reasons: Reason[];
-}
-interface FactorNonNullableFields {
-    factorId: string;
-    type: FactorType;
-    status: Status;
-}
-interface IdentityNonNullableFields {
-    connections: ConnectionNonNullableFields[];
-    identityProfile?: IdentityProfileNonNullableFields;
-    metadata?: MetadataNonNullableFields;
-    email?: EmailNonNullableFields;
-    status?: StatusV2NonNullableFields;
-    factors: FactorNonNullableFields[];
-}
-export interface StateMachineResponseNonNullableFields {
-    requireMfaData?: RequireMfaDataNonNullableFields;
-    mfaChallengeData?: MfaChallengeDataNonNullableFields;
-    state: StateType;
-    identity?: IdentityNonNullableFields;
-}
-interface HeadersEntryNonNullableFields {
-    key: string;
-    value: string;
-}
-export interface RawHttpResponseNonNullableFields {
-    body: Uint8Array;
-    headers: HeadersEntryNonNullableFields[];
-}
-export interface SignOnResponseNonNullableFields {
-    sessionToken: string;
-    identity?: IdentityNonNullableFields;
-}
 /**
  * Registers a new member.
  *
@@ -785,7 +776,7 @@ export interface SignOnResponseNonNullableFields {
  * @requiredField loginId
  * @fqn wix.iam.authentication.v1.AuthenticationService.RegisterV2
  */
-export declare function registerV2(loginId: LoginId, options?: RegisterV2Options): Promise<StateMachineResponse & StateMachineResponseNonNullableFields>;
+export declare function registerV2(loginId: LoginId, options?: RegisterV2Options): Promise<NonNullablePaths<StateMachineResponse, `state` | `identity.connections` | `identity.connections.${number}.idpConnection.idpConnectionId` | `identity.connections.${number}.idpConnection.idpUserId` | `identity.connections.${number}.authenticatorConnection.authenticatorConnectionId` | `identity.connections.${number}.authenticatorConnection.reEnrollmentRequired` | `identity.identityProfile.emails` | `identity.identityProfile.phones` | `identity.identityProfile.labels` | `identity.identityProfile.privacyStatus` | `identity.identityProfile.customFields` | `identity.identityProfile.customFields.${number}.name` | `identity.identityProfile.customFields.${number}.value.strValue` | `identity.identityProfile.customFields.${number}.value.numValue` | `identity.identityProfile.customFields.${number}.value.listValue.value` | `identity.identityProfile.secondaryEmails` | `identity.identityProfile.secondaryEmails.${number}.email` | `identity.identityProfile.secondaryEmails.${number}.tag` | `identity.identityProfile.phonesV2` | `identity.identityProfile.phonesV2.${number}.phone` | `identity.identityProfile.phonesV2.${number}.tag` | `identity.identityProfile.addresses` | `identity.identityProfile.addresses.${number}.tag` | `identity.metadata.tags` | `identity.email.address` | `identity.email.isVerified` | `identity.status.name` | `identity.status.reasons` | `identity.factors` | `identity.factors.${number}.factorId` | `identity.factors.${number}.type` | `identity.factors.${number}.status`>>;
 export interface RegisterV2Options {
     /** Password of the registering member. */
     password?: string;
@@ -807,7 +798,7 @@ export interface RegisterV2Options {
  * @requiredField loginId
  * @fqn wix.iam.authentication.v1.AuthenticationService.LoginV2
  */
-export declare function loginV2(loginId: LoginId, options?: LoginV2Options): Promise<StateMachineResponse & StateMachineResponseNonNullableFields>;
+export declare function loginV2(loginId: LoginId, options?: LoginV2Options): Promise<NonNullablePaths<StateMachineResponse, `state` | `identity.connections` | `identity.connections.${number}.idpConnection.idpConnectionId` | `identity.connections.${number}.idpConnection.idpUserId` | `identity.connections.${number}.authenticatorConnection.authenticatorConnectionId` | `identity.connections.${number}.authenticatorConnection.reEnrollmentRequired` | `identity.identityProfile.emails` | `identity.identityProfile.phones` | `identity.identityProfile.labels` | `identity.identityProfile.privacyStatus` | `identity.identityProfile.customFields` | `identity.identityProfile.customFields.${number}.name` | `identity.identityProfile.customFields.${number}.value.strValue` | `identity.identityProfile.customFields.${number}.value.numValue` | `identity.identityProfile.customFields.${number}.value.listValue.value` | `identity.identityProfile.secondaryEmails` | `identity.identityProfile.secondaryEmails.${number}.email` | `identity.identityProfile.secondaryEmails.${number}.tag` | `identity.identityProfile.phonesV2` | `identity.identityProfile.phonesV2.${number}.phone` | `identity.identityProfile.phonesV2.${number}.tag` | `identity.identityProfile.addresses` | `identity.identityProfile.addresses.${number}.tag` | `identity.metadata.tags` | `identity.email.address` | `identity.email.isVerified` | `identity.status.name` | `identity.status.reasons` | `identity.factors` | `identity.factors.${number}.factorId` | `identity.factors.${number}.type` | `identity.factors.${number}.status`>>;
 export interface LoginV2Options {
     /** Password of the identity logging in. */
     password?: string;
@@ -830,7 +821,7 @@ export declare function changePassword(newPassword: string): Promise<void>;
  * @documentationMaturity preview
  * @fqn wix.iam.authentication.v1.AuthenticationService.LoginCallback
  */
-export declare function loginCallback(options?: LoginCallbackOptions): Promise<RawHttpResponse & RawHttpResponseNonNullableFields>;
+export declare function loginCallback(options?: LoginCallbackOptions): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`>>;
 export interface LoginCallbackOptions {
     /** state that that received on the redirect */
     state?: string;
@@ -847,7 +838,7 @@ export interface LoginCallbackOptions {
  * @applicableIdentity APP
  * @fqn wix.iam.authentication.v1.AuthenticationService.SignOn
  */
-export declare function signOn(loginId: LoginId, options?: SignOnOptions): Promise<SignOnResponse & SignOnResponseNonNullableFields>;
+export declare function signOn(loginId: LoginId, options?: SignOnOptions): Promise<NonNullablePaths<SignOnResponse, `sessionToken` | `identity.connections` | `identity.connections.${number}.idpConnection.idpConnectionId` | `identity.connections.${number}.idpConnection.idpUserId` | `identity.connections.${number}.authenticatorConnection.authenticatorConnectionId` | `identity.connections.${number}.authenticatorConnection.reEnrollmentRequired` | `identity.identityProfile.emails` | `identity.identityProfile.phones` | `identity.identityProfile.labels` | `identity.identityProfile.privacyStatus` | `identity.identityProfile.customFields` | `identity.identityProfile.customFields.${number}.name` | `identity.identityProfile.customFields.${number}.value.strValue` | `identity.identityProfile.customFields.${number}.value.numValue` | `identity.identityProfile.customFields.${number}.value.listValue.value` | `identity.identityProfile.secondaryEmails` | `identity.identityProfile.secondaryEmails.${number}.email` | `identity.identityProfile.secondaryEmails.${number}.tag` | `identity.identityProfile.phonesV2` | `identity.identityProfile.phonesV2.${number}.phone` | `identity.identityProfile.phonesV2.${number}.tag` | `identity.identityProfile.addresses` | `identity.identityProfile.addresses.${number}.tag` | `identity.metadata.tags` | `identity.email.address` | `identity.email.isVerified` | `identity.status.name` | `identity.status.reasons` | `identity.factors` | `identity.factors.${number}.factorId` | `identity.factors.${number}.type` | `identity.factors.${number}.status`>>;
 export interface SignOnOptions {
     /** profile of the identity */
     profile?: IdentityProfile;
@@ -862,7 +853,7 @@ export interface SignOnOptions {
  * @documentationMaturity preview
  * @fqn wix.iam.authentication.v1.AuthenticationService.Logout
  */
-export declare function logout(options?: LogoutOptions): Promise<RawHttpResponse & RawHttpResponseNonNullableFields>;
+export declare function logout(options?: LogoutOptions): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`>>;
 export interface LogoutOptions {
     /**
      * redirect after logout
@@ -880,7 +871,7 @@ export interface LogoutOptions {
  * @requiredField factorType
  * @fqn wix.iam.authentication.v1.AuthenticationService.Verify
  */
-export declare function verify(factorType: FactorType, options?: VerifyOptions): Promise<StateMachineResponse & StateMachineResponseNonNullableFields>;
+export declare function verify(factorType: FactorType, options?: VerifyOptions): Promise<NonNullablePaths<StateMachineResponse, `state` | `identity.connections` | `identity.connections.${number}.idpConnection.idpConnectionId` | `identity.connections.${number}.idpConnection.idpUserId` | `identity.connections.${number}.authenticatorConnection.authenticatorConnectionId` | `identity.connections.${number}.authenticatorConnection.reEnrollmentRequired` | `identity.identityProfile.emails` | `identity.identityProfile.phones` | `identity.identityProfile.labels` | `identity.identityProfile.privacyStatus` | `identity.identityProfile.customFields` | `identity.identityProfile.customFields.${number}.name` | `identity.identityProfile.customFields.${number}.value.strValue` | `identity.identityProfile.customFields.${number}.value.numValue` | `identity.identityProfile.customFields.${number}.value.listValue.value` | `identity.identityProfile.secondaryEmails` | `identity.identityProfile.secondaryEmails.${number}.email` | `identity.identityProfile.secondaryEmails.${number}.tag` | `identity.identityProfile.phonesV2` | `identity.identityProfile.phonesV2.${number}.phone` | `identity.identityProfile.phonesV2.${number}.tag` | `identity.identityProfile.addresses` | `identity.identityProfile.addresses.${number}.tag` | `identity.metadata.tags` | `identity.email.address` | `identity.email.isVerified` | `identity.status.name` | `identity.status.reasons` | `identity.factors` | `identity.factors.${number}.factorId` | `identity.factors.${number}.type` | `identity.factors.${number}.status`>>;
 export interface VerifyOptions extends VerifyOptionsFactorDataOneOf {
     /**
      * TODO: is this a reasonable maxLength?
@@ -902,4 +893,3 @@ export interface VerifyOptionsFactorDataOneOf {
     totpData?: TotpVerifyData;
     pushData?: PushVerifyData;
 }
-export {};

package/build/es/src/iam-authentication-v1-authentication-authentication.universal.js

@@ -81,6 +81,8 @@ export var FactorType;
     FactorType["TOTP"] = "TOTP";
     /** Requires authentication via a push notification. */
     FactorType["PUSH"] = "PUSH";
+    /** Requires authentication via WebAuthn/passkey. */
+    FactorType["WEBAUTHN"] = "WEBAUTHN";
 })(FactorType || (FactorType = {}));
 export var Status;
 (function (Status) {
@@ -108,6 +110,20 @@ export var MfaReason;
     /** Mfa is required due to high risk login */
     MfaReason["HIGH_RISK_LOGIN"] = "HIGH_RISK_LOGIN";
 })(MfaReason || (MfaReason = {}));
+export var UserVerificationRequirement;
+(function (UserVerificationRequirement) {
+    /** Default unspecified value */
+    UserVerificationRequirement["USER_VERIFICATION_UNSPECIFIED"] = "USER_VERIFICATION_UNSPECIFIED";
+    /**
+     * The Relying Party requires user verification and will fail the operation if the response doesn't have the UV flag
+     * set
+     */
+    UserVerificationRequirement["USER_VERIFICATION_REQUIRED"] = "USER_VERIFICATION_REQUIRED";
+    /** The Relying Party prefers user verification but will not fail the operation if unavailable */
+    UserVerificationRequirement["USER_VERIFICATION_PREFERRED"] = "USER_VERIFICATION_PREFERRED";
+    /** The Relying Party does not want user verification employed (e.g., to minimize disruption to the user experience) */
+    UserVerificationRequirement["USER_VERIFICATION_DISCOURAGED"] = "USER_VERIFICATION_DISCOURAGED";
+})(UserVerificationRequirement || (UserVerificationRequirement = {}));
 export var TenantType;
 (function (TenantType) {
     TenantType["UNKNOWN_TENANT_TYPE"] = "UNKNOWN_TENANT_TYPE";