@wix/auto_sdk_identity_oauth 1.0.55 → 1.0.57

package/build/internal/es/index.d.mts

@@ -21,7 +21,7 @@ interface TokenSignature {
      * about the error in `body`. Error details follow the
      * [conventions of the Internet Engineering Task Force (IETF)](https://datatracker.ietf.org/doc/html/rfc6749#appendix-A.7).
      */
-    (options?: TokenOptions): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`, 4>>;
+    (options?: TokenOptions): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`, 2>>;
 }
 declare function jwks$1(httpClient: HttpClient): JwksSignature;
 interface JwksSignature {
@@ -30,14 +30,14 @@ interface JwksSignature {
      * tokens (e.g. OIDC id_token). Required by external OIDC relying parties.
      * Serves a non-secret public key.
      */
-    (): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`, 4>>;
+    (): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`, 2>>;
 }
 declare function tokenInfo$1(httpClient: HttpClient): TokenInfoSignature;
 interface TokenInfoSignature {
     /**
      * Token Introspection Endpoint.
      */
-    (options?: TokenInfoOptions): Promise<NonNullablePaths<TokenInfoResponse, `active` | `subjectType` | `subjectId` | `clientId`, 2>>;
+    (options?: TokenInfoOptions): Promise<NonNullablePaths<TokenInfoResponse, `active` | `subjectType` | `subjectId` | `clientId`, 0>>;
 }
 declare function userInfo$1(httpClient: HttpClient): UserInfoSignature;
 interface UserInfoSignature {
@@ -46,7 +46,7 @@ interface UserInfoSignature {
      * Should be called with user access token obtained in OIDC flow as Authorization header
      * @returns UserInfo endpoint response for OpenID Connect
      */
-    (): Promise<NonNullablePaths<UserInfoResponse, `sub`, 2>>;
+    (): Promise<NonNullablePaths<UserInfoResponse, `sub`, 0>>;
 }
 
 declare const token: MaybeContext<BuildRESTFunction<typeof token$1> & typeof token$1>;

package/build/internal/es/index.typings.d.mts

@@ -84,16 +84,24 @@ interface AuthorizeRequest {
     /**
      * DEPRECATED: no longer read. The sign-in URL is resolved from the client's OAuthClientConfiguration
      * component (sign_in_url), falling back to the default Wix sign-in page.
+     * @internal
      * @format SECURE_WEB_URL
      * @deprecated
      */
     signInUrl?: string | null;
-    /** Indicates whether the user has consented to the requested scopes */
+    /**
+     * Indicates whether the user has consented to the requested scopes
+     * @internal
+     */
     userConsented?: boolean | null;
-    /** Indicates whether login is optional. If true, will not redirect to the sign_in_url if user is not logged in. */
+    /**
+     * Indicates whether login is optional. If true, will not redirect to the sign_in_url if user is not logged in.
+     * @internal
+     */
     optionalLogin?: boolean | null;
     /**
      * The site id the authorization is requested for.
+     * @internal
      * @format GUID
      */
     metaSiteId?: string | null;
@@ -101,6 +109,7 @@ interface AuthorizeRequest {
      * ID of the IAM IdP connection to authenticate with when no member session exists.
      * When set, the sign-in redirect initiates an OIDC login against this IdP connection
      * (IAM's `/sso/login` endpoint) instead of the default Wix login page.
+     * @internal
      * @format GUID
      */
     idp?: string | null;
@@ -109,12 +118,25 @@ interface AuthorizeRequest {
      * @maxLength 512
      */
     nonce?: string | null;
-    /** RFC 9470 / OIDC acr_values: space-separated required ACRs (OR, in preference order) for step-up. */
+    /**
+     * RFC 9470 / OIDC acr_values: space-separated required ACRs (OR, in preference order) for step-up.
+     * @internal
+     */
     acrValues?: string | null;
-    /** RFC 9470 / OIDC max_age: max seconds since last auth (0 forces re-auth). */
+    /**
+     * RFC 9470 / OIDC max_age: max seconds since last auth (0 forces re-auth).
+     * @internal
+     */
     maxAge?: string | null;
     /** OIDC prompt. Only "none" is honored: request silent authorization with no user interaction. */
     prompt?: string | null;
+    /**
+     * Standard OAuth error code the step-up surface returns on the browser redirect back to authorize
+     * (e.g. access_denied, unmet_authentication_requirements). Browser-supplied like acr_values/prompt, so
+     * untrusted: allowlisted and forwarded to the client as the OAuth error.
+     * @internal
+     */
+    stepUpError?: string | null;
 }
 interface RawHttpResponse {
     body?: Uint8Array;
@@ -417,7 +439,7 @@ interface UserInfoResponse {
  * @public
  * @fqn wix.identity.oauth2.v1.Oauth2Ng.Token
  */
-declare function token(options?: TokenOptions): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`, 4>>;
+declare function token(options?: TokenOptions): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`, 2>>;
 interface TokenOptions {
     body?: Uint8Array;
     pathParams?: PathParametersEntry[];
@@ -435,13 +457,13 @@ interface TokenOptions {
  * @documentationMaturity preview
  * @fqn wix.identity.oauth2.v1.Oauth2Ng.Jwks
  */
-declare function jwks(): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`, 4>>;
+declare function jwks(): Promise<NonNullablePaths<RawHttpResponse, `body` | `headers` | `headers.${number}.key` | `headers.${number}.value`, 2>>;
 /**
  * Token Introspection Endpoint.
  * @public
  * @fqn wix.identity.oauth2.v1.Oauth2Ng.TokenInfo
  */
-declare function tokenInfo(options?: TokenInfoOptions): Promise<NonNullablePaths<TokenInfoResponse, `active` | `subjectType` | `subjectId` | `clientId`, 2>>;
+declare function tokenInfo(options?: TokenInfoOptions): Promise<NonNullablePaths<TokenInfoResponse, `active` | `subjectType` | `subjectId` | `clientId`, 0>>;
 interface TokenInfoOptions {
     body?: Uint8Array;
     pathParams?: PathParametersEntry[];
@@ -459,6 +481,6 @@ interface TokenInfoOptions {
  * @returns UserInfo endpoint response for OpenID Connect
  * @fqn wix.identity.oauth2.v1.Oauth2Ng.UserInfo
  */
-declare function userInfo(): Promise<NonNullablePaths<UserInfoResponse, `sub`, 2>>;
+declare function userInfo(): Promise<NonNullablePaths<UserInfoResponse, `sub`, 0>>;
 
 export { type ActionEvent, type AuthorizeRequest, type DeviceAuthorizationInfoRequest, type DeviceAuthorizationInfoResponse, type DeviceAuthorizeRequest, type DeviceAuthorizeResponse, type DeviceCodeRequest, type DeviceCodeResponse, type DeviceVerifyRequest, type DeviceVerifyResponse, type DeviceVerifyV2Request, type DeviceVerifyV2Response, type DomainEvent, type DomainEventBodyOneOf, type Empty, type EntityCreatedEvent, type EntityDeletedEvent, type EntityUpdatedEvent, type HeadersEntry, type InvalidateUserCodeRequest, type InvalidateUserCodeResponse, type JwksRequest, type PathParametersEntry, type QueryParametersEntry, type RawHttpRequest, type RawHttpResponse, type RefreshToken, type RestoreInfo, type RevokeRefreshTokenRequest, type RevokeRefreshTokenResponse, SubjectType, type SubjectTypeWithLiterals, type TokenInfoOptions, type TokenInfoResponse, type TokenOptions, type UserBlockedEvent, type UserDeletedEvent, type UserInfoRequest, type UserInfoResponse, jwks, token, tokenInfo, userInfo };

package/build/internal/es/meta.d.mts

@@ -85,16 +85,24 @@ interface AuthorizeRequest {
     /**
      * DEPRECATED: no longer read. The sign-in URL is resolved from the client's OAuthClientConfiguration
      * component (sign_in_url), falling back to the default Wix sign-in page.
+     * @internal
      * @format SECURE_WEB_URL
      * @deprecated
      */
     signInUrl?: string | null;
-    /** Indicates whether the user has consented to the requested scopes */
+    /**
+     * Indicates whether the user has consented to the requested scopes
+     * @internal
+     */
     userConsented?: boolean | null;
-    /** Indicates whether login is optional. If true, will not redirect to the sign_in_url if user is not logged in. */
+    /**
+     * Indicates whether login is optional. If true, will not redirect to the sign_in_url if user is not logged in.
+     * @internal
+     */
     optionalLogin?: boolean | null;
     /**
      * The site id the authorization is requested for.
+     * @internal
      * @format GUID
      */
     metaSiteId?: string | null;
@@ -102,6 +110,7 @@ interface AuthorizeRequest {
      * ID of the IAM IdP connection to authenticate with when no member session exists.
      * When set, the sign-in redirect initiates an OIDC login against this IdP connection
      * (IAM's `/sso/login` endpoint) instead of the default Wix login page.
+     * @internal
      * @format GUID
      */
     idp?: string | null;
@@ -110,12 +119,25 @@ interface AuthorizeRequest {
      * @maxLength 512
      */
     nonce?: string | null;
-    /** RFC 9470 / OIDC acr_values: space-separated required ACRs (OR, in preference order) for step-up. */
+    /**
+     * RFC 9470 / OIDC acr_values: space-separated required ACRs (OR, in preference order) for step-up.
+     * @internal
+     */
     acrValues?: string | null;
-    /** RFC 9470 / OIDC max_age: max seconds since last auth (0 forces re-auth). */
+    /**
+     * RFC 9470 / OIDC max_age: max seconds since last auth (0 forces re-auth).
+     * @internal
+     */
     maxAge?: string | null;
     /** OIDC prompt. Only "none" is honored: request silent authorization with no user interaction. */
     prompt?: string | null;
+    /**
+     * Standard OAuth error code the step-up surface returns on the browser redirect back to authorize
+     * (e.g. access_denied, unmet_authentication_requirements). Browser-supplied like acr_values/prompt, so
+     * untrusted: allowlisted and forwarded to the client as the OAuth error.
+     * @internal
+     */
+    stepUpError?: string | null;
 }
 interface RawHttpResponse {
     body?: Uint8Array;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/auto_sdk_identity_oauth",
-  "version": "1.0.55",
+  "version": "1.0.57",
   "license": "MIT",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -50,5 +50,5 @@
       "fqdn": "wix.identity.oauth.v1.refresh_token"
     }
   },
-  "falconPackageHash": "e5bcb12c5f96acd5a0fd7d99819971dd4d5328cd95c82fd9a0bab452"
+  "falconPackageHash": "0a4c779e92a79b85f94a6177f9869d930d9cb9c803e3a5b3d98fe4bc"
 }