@yielded/auth 0.1.0-beta.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +18 -0
- package/dist/Atom.d.mts +5 -0
- package/dist/Atom.mjs +5 -0
- package/dist/Auth.d.mts +9 -0
- package/dist/Auth.mjs +7 -0
- package/dist/AuthContract.d.mts +4 -0
- package/dist/AuthContract.mjs +4 -0
- package/dist/AuthSession.d.mts +82 -0
- package/dist/AuthSession.mjs +138 -0
- package/dist/AuthSession.mjs.map +1 -0
- package/dist/AuthStore.d.mts +68 -0
- package/dist/AuthStore.mjs +194 -0
- package/dist/AuthStore.mjs.map +1 -0
- package/dist/AuthTokenCodec.d.mts +40 -0
- package/dist/AuthTokenCodec.mjs +104 -0
- package/dist/AuthTokenCodec.mjs.map +1 -0
- package/dist/Client.d.mts +2 -0
- package/dist/Client.mjs +2 -0
- package/dist/Cloudflare.d.mts +89 -0
- package/dist/Cloudflare.mjs +166 -0
- package/dist/Cloudflare.mjs.map +1 -0
- package/dist/Drizzle.d.mts +28 -0
- package/dist/Drizzle.mjs +27 -0
- package/dist/DrizzleD1.d.mts +935 -0
- package/dist/DrizzleD1.mjs +29 -0
- package/dist/DrizzleD1.mjs.map +1 -0
- package/dist/DrizzleLibsql.d.mts +2288 -0
- package/dist/DrizzleLibsql.mjs +85 -0
- package/dist/DrizzleLibsql.mjs.map +1 -0
- package/dist/DrizzleMysql2.d.mts +1809 -0
- package/dist/DrizzleMysql2.mjs +55 -0
- package/dist/DrizzleMysql2.mjs.map +1 -0
- package/dist/DrizzlePglite.d.mts +1808 -0
- package/dist/DrizzlePglite.mjs +45 -0
- package/dist/DrizzlePglite.mjs.map +1 -0
- package/dist/DrizzlePostgres.d.mts +1808 -0
- package/dist/DrizzlePostgres.mjs +45 -0
- package/dist/DrizzlePostgres.mjs.map +1 -0
- package/dist/DrizzleSqliteBun.d.mts +2287 -0
- package/dist/DrizzleSqliteBun.mjs +62 -0
- package/dist/DrizzleSqliteBun.mjs.map +1 -0
- package/dist/DrizzleSqliteDo.d.mts +2343 -0
- package/dist/DrizzleSqliteDo.mjs +105 -0
- package/dist/DrizzleSqliteDo.mjs.map +1 -0
- package/dist/DrizzleSqliteNode.d.mts +2287 -0
- package/dist/DrizzleSqliteNode.mjs +62 -0
- package/dist/DrizzleSqliteNode.mjs.map +1 -0
- package/dist/DrizzleSqliteWasm.d.mts +2287 -0
- package/dist/DrizzleSqliteWasm.mjs +62 -0
- package/dist/DrizzleSqliteWasm.mjs.map +1 -0
- package/dist/Email.d.mts +12 -0
- package/dist/Email.mjs +11 -0
- package/dist/EmailOtp.d.mts +42 -0
- package/dist/EmailOtp.mjs +120 -0
- package/dist/EmailOtp.mjs.map +1 -0
- package/dist/EmailOtpSender.d.mts +22 -0
- package/dist/EmailOtpSender.mjs +18 -0
- package/dist/EmailOtpSender.mjs.map +1 -0
- package/dist/Errors.d.mts +55 -0
- package/dist/Errors.mjs +31 -0
- package/dist/Errors.mjs.map +1 -0
- package/dist/GitHub.d.mts +5 -0
- package/dist/GitHub.mjs +4 -0
- package/dist/Hooks.d.mts +6 -0
- package/dist/Hooks.mjs +6 -0
- package/dist/Http.d.mts +12 -0
- package/dist/Http.mjs +12 -0
- package/dist/HttpServer.d.mts +103 -0
- package/dist/HttpServer.mjs +326 -0
- package/dist/HttpServer.mjs.map +1 -0
- package/dist/Identity.d.mts +9 -0
- package/dist/Identity.mjs +9 -0
- package/dist/IdentityResolver.d.mts +16 -0
- package/dist/IdentityResolver.mjs +12 -0
- package/dist/IdentityResolver.mjs.map +1 -0
- package/dist/OAuth.d.mts +36 -0
- package/dist/OAuth.mjs +35 -0
- package/dist/OpenIdClient.d.mts +3 -0
- package/dist/OpenIdClient.mjs +3 -0
- package/dist/OpenIdClientConnected.d.mts +4 -0
- package/dist/OpenIdClientConnected.mjs +3 -0
- package/dist/OperationHttp.d.mts +3 -0
- package/dist/OperationHttp.mjs +3 -0
- package/dist/OperationHttpClient.d.mts +2 -0
- package/dist/OperationHttpClient.mjs +2 -0
- package/dist/OperationHttpServer.d.mts +5 -0
- package/dist/OperationHttpServer.mjs +4 -0
- package/dist/Operations.d.mts +8 -0
- package/dist/Operations.mjs +8 -0
- package/dist/Passkey.d.mts +12 -0
- package/dist/Passkey.mjs +12 -0
- package/dist/PasskeyBrowser.d.mts +4 -0
- package/dist/PasskeyBrowser.mjs +4 -0
- package/dist/PasskeyContract.d.mts +641 -0
- package/dist/PasskeyContract.mjs +174 -0
- package/dist/PasskeyContract.mjs.map +1 -0
- package/dist/PasskeyPassword.d.mts +412 -0
- package/dist/PasskeyPassword.mjs +174 -0
- package/dist/PasskeyPassword.mjs.map +1 -0
- package/dist/PasskeySimpleWebAuthn.d.mts +3 -0
- package/dist/PasskeySimpleWebAuthn.mjs +3 -0
- package/dist/Password.d.mts +19 -0
- package/dist/Password.mjs +17 -0
- package/dist/PasswordAuth.d.mts +45 -0
- package/dist/PasswordAuth.mjs +79 -0
- package/dist/PasswordAuth.mjs.map +1 -0
- package/dist/PasswordCredentialStore.d.mts +46 -0
- package/dist/PasswordCredentialStore.mjs +62 -0
- package/dist/PasswordCredentialStore.mjs.map +1 -0
- package/dist/PasswordHasher.d.mts +31 -0
- package/dist/PasswordHasher.mjs +76 -0
- package/dist/PasswordHasher.mjs.map +1 -0
- package/dist/PhoneOtp.d.mts +11 -0
- package/dist/PhoneOtp.mjs +11 -0
- package/dist/Policy.d.mts +52 -0
- package/dist/Policy.mjs +36 -0
- package/dist/Policy.mjs.map +1 -0
- package/dist/Proofs.d.mts +14 -0
- package/dist/Proofs.mjs +13 -0
- package/dist/Rpc.d.mts +12 -0
- package/dist/Rpc.mjs +11 -0
- package/dist/Rpc.mjs.map +1 -0
- package/dist/Schema.d.mts +160 -0
- package/dist/Schema.mjs +141 -0
- package/dist/Schema.mjs.map +1 -0
- package/dist/SessionContract.d.mts +3 -0
- package/dist/SessionContract.mjs +3 -0
- package/dist/Sessions.d.mts +14 -0
- package/dist/Sessions.mjs +12 -0
- package/dist/Testing.d.mts +7 -0
- package/dist/Testing.mjs +7 -0
- package/dist/Totp.d.mts +8 -0
- package/dist/Totp.mjs +8 -0
- package/dist/TotpContract.d.mts +318 -0
- package/dist/TotpContract.mjs +119 -0
- package/dist/TotpContract.mjs.map +1 -0
- package/dist/WebCrypto.d.mts +28 -0
- package/dist/WebCrypto.mjs +42 -0
- package/dist/WebCrypto.mjs.map +1 -0
- package/dist/Workflows.d.mts +16 -0
- package/dist/Workflows.mjs +11 -0
- package/dist/Workflows.mjs.map +1 -0
- package/dist/atom/AuthAtomLifetime.d.mts +35 -0
- package/dist/atom/AuthAtomLifetime.mjs +50 -0
- package/dist/atom/AuthAtomLifetime.mjs.map +1 -0
- package/dist/atom/AuthAtomWorkflow.d.mts +17 -0
- package/dist/atom/AuthAtomWorkflow.mjs +9 -0
- package/dist/atom/AuthAtomWorkflow.mjs.map +1 -0
- package/dist/atom/client.d.mts +43 -0
- package/dist/atom/client.mjs +168 -0
- package/dist/atom/client.mjs.map +1 -0
- package/dist/atom/operations.d.mts +35 -0
- package/dist/atom/operations.mjs +58 -0
- package/dist/atom/operations.mjs.map +1 -0
- package/dist/atom/scoped-runtime.mjs +151 -0
- package/dist/atom/scoped-runtime.mjs.map +1 -0
- package/dist/auth/Auth.d.mts +7806 -0
- package/dist/auth/Auth.mjs +141 -0
- package/dist/auth/Auth.mjs.map +1 -0
- package/dist/auth/AuthConfigurationError.d.mts +10 -0
- package/dist/auth/AuthConfigurationError.mjs +14 -0
- package/dist/auth/AuthConfigurationError.mjs.map +1 -0
- package/dist/auth/AuthRequest.d.mts +21 -0
- package/dist/auth/AuthRequest.mjs +10 -0
- package/dist/auth/AuthRequest.mjs.map +1 -0
- package/dist/auth/AuthStrategy.d.mts +23 -0
- package/dist/auth/AuthStrategy.mjs +33 -0
- package/dist/auth/AuthStrategy.mjs.map +1 -0
- package/dist/auth/ConsumeDecision.d.mts +11 -0
- package/dist/auth/actions.d.mts +18 -0
- package/dist/auth/actions.mjs +70 -0
- package/dist/auth/actions.mjs.map +1 -0
- package/dist/auth/defaults.mjs +12 -0
- package/dist/auth/defaults.mjs.map +1 -0
- package/dist/auth/definition.d.mts +46 -0
- package/dist/auth/session.d.mts +27 -0
- package/dist/auth/session.mjs +56 -0
- package/dist/auth/session.mjs.map +1 -0
- package/dist/drizzle/D1BatchStatements.d.mts +11 -0
- package/dist/drizzle/D1BatchStatements.mjs +8 -0
- package/dist/drizzle/D1BatchStatements.mjs.map +1 -0
- package/dist/drizzle/PasswordPreparedPostconditions.mjs +12 -0
- package/dist/drizzle/PasswordPreparedPostconditions.mjs.map +1 -0
- package/dist/drizzle/SuppliedService.d.mts +10 -0
- package/dist/drizzle/d1-emails.d.mts +68 -0
- package/dist/drizzle/d1-emails.mjs +580 -0
- package/dist/drizzle/d1-emails.mjs.map +1 -0
- package/dist/drizzle/d1-generated-statement.mjs +79 -0
- package/dist/drizzle/d1-generated-statement.mjs.map +1 -0
- package/dist/drizzle/d1-identity.d.mts +33 -0
- package/dist/drizzle/d1-identity.mjs +120 -0
- package/dist/drizzle/d1-identity.mjs.map +1 -0
- package/dist/drizzle/d1-oauth.d.mts +316 -0
- package/dist/drizzle/d1-oauth.mjs +79 -0
- package/dist/drizzle/d1-oauth.mjs.map +1 -0
- package/dist/drizzle/d1-passkey.d.mts +52 -0
- package/dist/drizzle/d1-passkey.mjs +97 -0
- package/dist/drizzle/d1-passkey.mjs.map +1 -0
- package/dist/drizzle/d1-password-prepared.d.mts +27 -0
- package/dist/drizzle/d1-password-prepared.mjs +464 -0
- package/dist/drizzle/d1-password-prepared.mjs.map +1 -0
- package/dist/drizzle/d1-passwords.d.mts +96 -0
- package/dist/drizzle/d1-passwords.mjs +1008 -0
- package/dist/drizzle/d1-passwords.mjs.map +1 -0
- package/dist/drizzle/d1-phone.d.mts +29 -0
- package/dist/drizzle/d1-phone.mjs +33 -0
- package/dist/drizzle/d1-phone.mjs.map +1 -0
- package/dist/drizzle/d1-planning.d.mts +12 -0
- package/dist/drizzle/d1-planning.mjs +43 -0
- package/dist/drizzle/d1-planning.mjs.map +1 -0
- package/dist/drizzle/d1-proofs.d.mts +88 -0
- package/dist/drizzle/d1-proofs.mjs +833 -0
- package/dist/drizzle/d1-proofs.mjs.map +1 -0
- package/dist/drizzle/d1-sessions.d.mts +77 -0
- package/dist/drizzle/d1-sessions.mjs +970 -0
- package/dist/drizzle/d1-sessions.mjs.map +1 -0
- package/dist/drizzle/d1-totp.d.mts +27 -0
- package/dist/drizzle/d1-totp.mjs +28 -0
- package/dist/drizzle/d1-totp.mjs.map +1 -0
- package/dist/drizzle/email-model.d.mts +352 -0
- package/dist/drizzle/email-model.mjs +21 -0
- package/dist/drizzle/email-model.mjs.map +1 -0
- package/dist/drizzle/email-registration.d.mts +33 -0
- package/dist/drizzle/email-registration.mjs +238 -0
- package/dist/drizzle/email-registration.mjs.map +1 -0
- package/dist/drizzle/email-sql.d.mts +18 -0
- package/dist/drizzle/email-sql.mjs +473 -0
- package/dist/drizzle/email-sql.mjs.map +1 -0
- package/dist/drizzle/email-target.d.mts +28 -0
- package/dist/drizzle/email-target.mjs +75 -0
- package/dist/drizzle/email-target.mjs.map +1 -0
- package/dist/drizzle/model.d.mts +259 -0
- package/dist/drizzle/model.mjs +81 -0
- package/dist/drizzle/model.mjs.map +1 -0
- package/dist/drizzle/mysql-emails.d.mts +82 -0
- package/dist/drizzle/mysql-emails.mjs +38 -0
- package/dist/drizzle/mysql-emails.mjs.map +1 -0
- package/dist/drizzle/mysql-identity.d.mts +24 -0
- package/dist/drizzle/mysql-identity.mjs +95 -0
- package/dist/drizzle/mysql-identity.mjs.map +1 -0
- package/dist/drizzle/mysql-password-prepared.d.mts +32 -0
- package/dist/drizzle/mysql-password-prepared.mjs +16 -0
- package/dist/drizzle/mysql-password-prepared.mjs.map +1 -0
- package/dist/drizzle/mysql-passwords.d.mts +102 -0
- package/dist/drizzle/mysql-passwords.mjs +38 -0
- package/dist/drizzle/mysql-passwords.mjs.map +1 -0
- package/dist/drizzle/mysql-proofs.d.mts +83 -0
- package/dist/drizzle/mysql-proofs.mjs +23 -0
- package/dist/drizzle/mysql-proofs.mjs.map +1 -0
- package/dist/drizzle/mysql-sessions.d.mts +250 -0
- package/dist/drizzle/mysql-sessions.mjs +53 -0
- package/dist/drizzle/mysql-sessions.mjs.map +1 -0
- package/dist/drizzle/mysql.d.mts +73 -0
- package/dist/drizzle/mysql.mjs +221 -0
- package/dist/drizzle/mysql.mjs.map +1 -0
- package/dist/drizzle/oauth-accounts.mjs +361 -0
- package/dist/drizzle/oauth-accounts.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-access.mjs +210 -0
- package/dist/drizzle/oauth-connected-access.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-collection.mjs +202 -0
- package/dist/drizzle/oauth-connected-collection.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-custody.mjs +146 -0
- package/dist/drizzle/oauth-connected-custody.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-drivers.mjs +78 -0
- package/dist/drizzle/oauth-connected-drivers.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-flow.mjs +248 -0
- package/dist/drizzle/oauth-connected-flow.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-input.mjs +105 -0
- package/dist/drizzle/oauth-connected-input.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-maintenance.mjs +215 -0
- package/dist/drizzle/oauth-connected-maintenance.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-management.mjs +228 -0
- package/dist/drizzle/oauth-connected-management.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-model.d.mts +278 -0
- package/dist/drizzle/oauth-connected-model.mjs +22 -0
- package/dist/drizzle/oauth-connected-model.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-reference.d.mts +17 -0
- package/dist/drizzle/oauth-connected-reference.mjs +53 -0
- package/dist/drizzle/oauth-connected-reference.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-settlement.mjs +117 -0
- package/dist/drizzle/oauth-connected-settlement.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-state.d.mts +16 -0
- package/dist/drizzle/oauth-connected-state.mjs +422 -0
- package/dist/drizzle/oauth-connected-state.mjs.map +1 -0
- package/dist/drizzle/oauth-connected-target.d.mts +114 -0
- package/dist/drizzle/oauth-connected-target.mjs +94 -0
- package/dist/drizzle/oauth-connected-target.mjs.map +1 -0
- package/dist/drizzle/oauth-drivers.mjs +53 -0
- package/dist/drizzle/oauth-drivers.mjs.map +1 -0
- package/dist/drizzle/oauth-flow.d.mts +7 -0
- package/dist/drizzle/oauth-flow.mjs +255 -0
- package/dist/drizzle/oauth-flow.mjs.map +1 -0
- package/dist/drizzle/oauth-input.mjs +130 -0
- package/dist/drizzle/oauth-input.mjs.map +1 -0
- package/dist/drizzle/oauth-model.d.mts +468 -0
- package/dist/drizzle/oauth-model.mjs +49 -0
- package/dist/drizzle/oauth-model.mjs.map +1 -0
- package/dist/drizzle/oauth-mysql.mjs +8 -0
- package/dist/drizzle/oauth-mysql.mjs.map +1 -0
- package/dist/drizzle/oauth-owner.d.mts +4 -0
- package/dist/drizzle/oauth-owner.mjs +10 -0
- package/dist/drizzle/oauth-owner.mjs.map +1 -0
- package/dist/drizzle/oauth-registration.d.mts +8 -0
- package/dist/drizzle/oauth-registration.mjs +375 -0
- package/dist/drizzle/oauth-registration.mjs.map +1 -0
- package/dist/drizzle/oauth-state.mjs +109 -0
- package/dist/drizzle/oauth-state.mjs.map +1 -0
- package/dist/drizzle/oauth-target.d.mts +125 -0
- package/dist/drizzle/oauth-target.mjs +252 -0
- package/dist/drizzle/oauth-target.mjs.map +1 -0
- package/dist/drizzle/passkey-admission.mjs +203 -0
- package/dist/drizzle/passkey-admission.mjs.map +1 -0
- package/dist/drizzle/passkey-credentials.mjs +239 -0
- package/dist/drizzle/passkey-credentials.mjs.map +1 -0
- package/dist/drizzle/passkey-drivers.mjs +34 -0
- package/dist/drizzle/passkey-drivers.mjs.map +1 -0
- package/dist/drizzle/passkey-enrollment.mjs +132 -0
- package/dist/drizzle/passkey-enrollment.mjs.map +1 -0
- package/dist/drizzle/passkey-flow.mjs +436 -0
- package/dist/drizzle/passkey-flow.mjs.map +1 -0
- package/dist/drizzle/passkey-management.mjs +225 -0
- package/dist/drizzle/passkey-management.mjs.map +1 -0
- package/dist/drizzle/passkey-model.d.mts +275 -0
- package/dist/drizzle/passkey-model.mjs +36 -0
- package/dist/drizzle/passkey-model.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-ceremony-model.d.mts +50 -0
- package/dist/drizzle/passkey-registration-ceremony-model.mjs +18 -0
- package/dist/drizzle/passkey-registration-ceremony-model.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-ceremony.mjs +124 -0
- package/dist/drizzle/passkey-registration-ceremony.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-custody.mjs +51 -0
- package/dist/drizzle/passkey-registration-custody.mjs.map +1 -0
- package/dist/drizzle/passkey-registration-write.mjs +205 -0
- package/dist/drizzle/passkey-registration-write.mjs.map +1 -0
- package/dist/drizzle/passkey-state.d.mts +5 -0
- package/dist/drizzle/passkey-state.mjs +207 -0
- package/dist/drizzle/passkey-state.mjs.map +1 -0
- package/dist/drizzle/passkey-target.d.mts +16 -0
- package/dist/drizzle/passkey-target.mjs +174 -0
- package/dist/drizzle/passkey-target.mjs.map +1 -0
- package/dist/drizzle/passkey-write-drivers.mjs +33 -0
- package/dist/drizzle/passkey-write-drivers.mjs.map +1 -0
- package/dist/drizzle/passkey-write-model.d.mts +192 -0
- package/dist/drizzle/passkey-write-model.mjs +13 -0
- package/dist/drizzle/passkey-write-model.mjs.map +1 -0
- package/dist/drizzle/passkey-write-state.mjs +326 -0
- package/dist/drizzle/passkey-write-state.mjs.map +1 -0
- package/dist/drizzle/passkey-write-target.d.mts +14 -0
- package/dist/drizzle/passkey-write-target.mjs +185 -0
- package/dist/drizzle/passkey-write-target.mjs.map +1 -0
- package/dist/drizzle/password-model.d.mts +330 -0
- package/dist/drizzle/password-model.mjs +22 -0
- package/dist/drizzle/password-model.mjs.map +1 -0
- package/dist/drizzle/password-prepared-model.d.mts +93 -0
- package/dist/drizzle/password-prepared-model.mjs +11 -0
- package/dist/drizzle/password-prepared-model.mjs.map +1 -0
- package/dist/drizzle/password-prepared-sql.mjs +394 -0
- package/dist/drizzle/password-prepared-sql.mjs.map +1 -0
- package/dist/drizzle/password-prepared-state.mjs +107 -0
- package/dist/drizzle/password-prepared-state.mjs.map +1 -0
- package/dist/drizzle/password-prepared-target.d.mts +12 -0
- package/dist/drizzle/password-prepared-target.mjs +57 -0
- package/dist/drizzle/password-prepared-target.mjs.map +1 -0
- package/dist/drizzle/password-registration.d.mts +23 -0
- package/dist/drizzle/password-registration.mjs +136 -0
- package/dist/drizzle/password-registration.mjs.map +1 -0
- package/dist/drizzle/password-sql.d.mts +20 -0
- package/dist/drizzle/password-sql.mjs +702 -0
- package/dist/drizzle/password-sql.mjs.map +1 -0
- package/dist/drizzle/password-target.d.mts +25 -0
- package/dist/drizzle/password-target.mjs +63 -0
- package/dist/drizzle/password-target.mjs.map +1 -0
- package/dist/drizzle/pg-emails.d.mts +83 -0
- package/dist/drizzle/pg-emails.mjs +38 -0
- package/dist/drizzle/pg-emails.mjs.map +1 -0
- package/dist/drizzle/pg-password-prepared.d.mts +33 -0
- package/dist/drizzle/pg-password-prepared.mjs +16 -0
- package/dist/drizzle/pg-password-prepared.mjs.map +1 -0
- package/dist/drizzle/pg-passwords.d.mts +103 -0
- package/dist/drizzle/pg-passwords.mjs +38 -0
- package/dist/drizzle/pg-passwords.mjs.map +1 -0
- package/dist/drizzle/pg-proofs.d.mts +84 -0
- package/dist/drizzle/pg-proofs.mjs +22 -0
- package/dist/drizzle/pg-proofs.mjs.map +1 -0
- package/dist/drizzle/pg-sessions.d.mts +251 -0
- package/dist/drizzle/pg-sessions.mjs +53 -0
- package/dist/drizzle/pg-sessions.mjs.map +1 -0
- package/dist/drizzle/pg.d.mts +88 -0
- package/dist/drizzle/pg.mjs +294 -0
- package/dist/drizzle/pg.mjs.map +1 -0
- package/dist/drizzle/phone-model.d.mts +117 -0
- package/dist/drizzle/phone-model.mjs +39 -0
- package/dist/drizzle/phone-model.mjs.map +1 -0
- package/dist/drizzle/phone-state.mjs +426 -0
- package/dist/drizzle/phone-state.mjs.map +1 -0
- package/dist/drizzle/phone-target.d.mts +19 -0
- package/dist/drizzle/phone-target.mjs +171 -0
- package/dist/drizzle/phone-target.mjs.map +1 -0
- package/dist/drizzle/proof-model.d.mts +287 -0
- package/dist/drizzle/proof-model.mjs +17 -0
- package/dist/drizzle/proof-model.mjs.map +1 -0
- package/dist/drizzle/proof-sql.d.mts +16 -0
- package/dist/drizzle/proof-sql.mjs +618 -0
- package/dist/drizzle/proof-sql.mjs.map +1 -0
- package/dist/drizzle/proof-target.d.mts +17 -0
- package/dist/drizzle/proof-target.mjs +38 -0
- package/dist/drizzle/proof-target.mjs.map +1 -0
- package/dist/drizzle/session-model.d.mts +201 -0
- package/dist/drizzle/session-model.mjs +19 -0
- package/dist/drizzle/session-model.mjs.map +1 -0
- package/dist/drizzle/session-sql.mjs +732 -0
- package/dist/drizzle/session-sql.mjs.map +1 -0
- package/dist/drizzle/session-target.d.mts +37 -0
- package/dist/drizzle/session-target.mjs +47 -0
- package/dist/drizzle/session-target.mjs.map +1 -0
- package/dist/drizzle/sqlite-emails.mjs +45 -0
- package/dist/drizzle/sqlite-emails.mjs.map +1 -0
- package/dist/drizzle/sqlite-identity.mjs +92 -0
- package/dist/drizzle/sqlite-identity.mjs.map +1 -0
- package/dist/drizzle/sqlite-password-prepared.mjs +21 -0
- package/dist/drizzle/sqlite-password-prepared.mjs.map +1 -0
- package/dist/drizzle/sqlite-passwords.mjs +49 -0
- package/dist/drizzle/sqlite-passwords.mjs.map +1 -0
- package/dist/drizzle/sqlite-proofs.mjs +29 -0
- package/dist/drizzle/sqlite-proofs.mjs.map +1 -0
- package/dist/drizzle/sqlite-sessions.mjs +74 -0
- package/dist/drizzle/sqlite-sessions.mjs.map +1 -0
- package/dist/drizzle/sqlite.d.mts +81 -0
- package/dist/drizzle/sqlite.mjs +220 -0
- package/dist/drizzle/sqlite.mjs.map +1 -0
- package/dist/drizzle/standalone-guard.mjs +19 -0
- package/dist/drizzle/standalone-guard.mjs.map +1 -0
- package/dist/drizzle/step-up-model.d.mts +65 -0
- package/dist/drizzle/step-up-model.mjs +9 -0
- package/dist/drizzle/step-up-model.mjs.map +1 -0
- package/dist/drizzle/step-up-state.mjs +34 -0
- package/dist/drizzle/step-up-state.mjs.map +1 -0
- package/dist/drizzle/totp-model.d.mts +85 -0
- package/dist/drizzle/totp-model.mjs +13 -0
- package/dist/drizzle/totp-model.mjs.map +1 -0
- package/dist/drizzle/totp-state.d.mts +39 -0
- package/dist/drizzle/totp-state.mjs +288 -0
- package/dist/drizzle/totp-state.mjs.map +1 -0
- package/dist/drizzle/totp-target.d.mts +16 -0
- package/dist/drizzle/totp-target.mjs +83 -0
- package/dist/drizzle/totp-target.mjs.map +1 -0
- package/dist/drizzle/transaction-execution.d.mts +20 -0
- package/dist/drizzle/transaction-execution.mjs +111 -0
- package/dist/drizzle/transaction-execution.mjs.map +1 -0
- package/dist/drizzle/transaction-mysql.mjs +46 -0
- package/dist/drizzle/transaction-mysql.mjs.map +1 -0
- package/dist/drizzle/transaction-owner.d.mts +6 -0
- package/dist/drizzle/transaction-owner.mjs +252 -0
- package/dist/drizzle/transaction-owner.mjs.map +1 -0
- package/dist/email/EmailActionEvidence.d.mts +33 -0
- package/dist/email/EmailActionEvidence.mjs +15 -0
- package/dist/email/EmailActionEvidence.mjs.map +1 -0
- package/dist/email/EmailAddressPersistence.d.mts +63 -0
- package/dist/email/EmailAddressPersistence.mjs +19 -0
- package/dist/email/EmailAddressPersistence.mjs.map +1 -0
- package/dist/email/EmailIdentifierNotifier.d.mts +30 -0
- package/dist/email/EmailIdentifierNotifier.mjs +31 -0
- package/dist/email/EmailIdentifierNotifier.mjs.map +1 -0
- package/dist/email/EmailReturnTargets.d.mts +19 -0
- package/dist/email/EmailReturnTargets.mjs +29 -0
- package/dist/email/EmailReturnTargets.mjs.map +1 -0
- package/dist/email/EmailSignInTargets.d.mts +20 -0
- package/dist/email/EmailSignInTargets.mjs +12 -0
- package/dist/email/EmailSignInTargets.mjs.map +1 -0
- package/dist/email/addresses.d.mts +33 -0
- package/dist/email/addresses.mjs +404 -0
- package/dist/email/addresses.mjs.map +1 -0
- package/dist/email/definition.d.mts +10153 -0
- package/dist/email/definition.mjs +111 -0
- package/dist/email/definition.mjs.map +1 -0
- package/dist/email/errors.d.mts +15 -0
- package/dist/email/errors.mjs +11 -0
- package/dist/email/errors.mjs.map +1 -0
- package/dist/email/magicLink.d.mts +33 -0
- package/dist/email/magicLink.mjs +58 -0
- package/dist/email/magicLink.mjs.map +1 -0
- package/dist/email/models.d.mts +56 -0
- package/dist/email/models.mjs +31 -0
- package/dist/email/models.mjs.map +1 -0
- package/dist/email/module.d.mts +22296 -0
- package/dist/email/module.mjs +415 -0
- package/dist/email/module.mjs.map +1 -0
- package/dist/email/registration.d.mts +28 -0
- package/dist/email/registration.mjs +243 -0
- package/dist/email/registration.mjs.map +1 -0
- package/dist/email/snapshot.mjs +37 -0
- package/dist/email/snapshot.mjs.map +1 -0
- package/dist/hooks/LifecycleHooks.d.mts +34 -0
- package/dist/hooks/LifecycleHooks.mjs +74 -0
- package/dist/hooks/LifecycleHooks.mjs.map +1 -0
- package/dist/hooks/commit.d.mts +66 -0
- package/dist/hooks/commit.mjs +136 -0
- package/dist/hooks/commit.mjs.map +1 -0
- package/dist/hooks/models.d.mts +51 -0
- package/dist/hooks/models.mjs +87 -0
- package/dist/hooks/models.mjs.map +1 -0
- package/dist/hooks/plugins.d.mts +36 -0
- package/dist/hooks/plugins.mjs +60 -0
- package/dist/hooks/plugins.mjs.map +1 -0
- package/dist/hooks/transactions.d.mts +31 -0
- package/dist/hooks/transactions.mjs +38 -0
- package/dist/hooks/transactions.mjs.map +1 -0
- package/dist/http/auth-api.d.mts +9 -0
- package/dist/http/auth-api.mjs +13 -0
- package/dist/http/auth-api.mjs.map +1 -0
- package/dist/http/auth-contract.d.mts +84 -0
- package/dist/http/auth-contract.mjs +75 -0
- package/dist/http/auth-contract.mjs.map +1 -0
- package/dist/http/auth-http.d.mts +216 -0
- package/dist/http/auth-http.mjs +184 -0
- package/dist/http/auth-http.mjs.map +1 -0
- package/dist/http/endpoints/get-session.d.mts +8 -0
- package/dist/http/endpoints/get-session.mjs +12 -0
- package/dist/http/endpoints/get-session.mjs.map +1 -0
- package/dist/http/endpoints/password-sign-in.d.mts +8 -0
- package/dist/http/endpoints/password-sign-in.mjs +18 -0
- package/dist/http/endpoints/password-sign-in.mjs.map +1 -0
- package/dist/http/endpoints/request-email-otp.d.mts +8 -0
- package/dist/http/endpoints/request-email-otp.mjs +17 -0
- package/dist/http/endpoints/request-email-otp.mjs.map +1 -0
- package/dist/http/endpoints/set-password.d.mts +9 -0
- package/dist/http/endpoints/set-password.mjs +19 -0
- package/dist/http/endpoints/set-password.mjs.map +1 -0
- package/dist/http/endpoints/sign-out.d.mts +6 -0
- package/dist/http/endpoints/sign-out.mjs +7 -0
- package/dist/http/endpoints/sign-out.mjs.map +1 -0
- package/dist/http/endpoints/verify-email-otp.d.mts +9 -0
- package/dist/http/endpoints/verify-email-otp.mjs +18 -0
- package/dist/http/endpoints/verify-email-otp.mjs.map +1 -0
- package/dist/http/models.d.mts +49 -0
- package/dist/http/models.mjs +35 -0
- package/dist/http/models.mjs.map +1 -0
- package/dist/http/security.d.mts +91 -0
- package/dist/http/security.mjs +77 -0
- package/dist/http/security.mjs.map +1 -0
- package/dist/http/session-contract.d.mts +303 -0
- package/dist/http/session-contract.mjs +38 -0
- package/dist/http/session-contract.mjs.map +1 -0
- package/dist/http-operation/OperationHttpInvocation.d.mts +16 -0
- package/dist/http-operation/OperationHttpInvocation.mjs +11 -0
- package/dist/http-operation/OperationHttpInvocation.mjs.map +1 -0
- package/dist/http-operation/OperationHttpServerConfig.d.mts +18 -0
- package/dist/http-operation/OperationHttpServerConfig.mjs +72 -0
- package/dist/http-operation/OperationHttpServerConfig.mjs.map +1 -0
- package/dist/http-operation/auth-client.d.mts +75 -0
- package/dist/http-operation/auth-client.mjs +116 -0
- package/dist/http-operation/auth-client.mjs.map +1 -0
- package/dist/http-operation/client.d.mts +50 -0
- package/dist/http-operation/client.mjs +188 -0
- package/dist/http-operation/client.mjs.map +1 -0
- package/dist/http-operation/configuration-schema.mjs +19 -0
- package/dist/http-operation/configuration-schema.mjs.map +1 -0
- package/dist/http-operation/contract.d.mts +40 -0
- package/dist/http-operation/contract.mjs +37 -0
- package/dist/http-operation/contract.mjs.map +1 -0
- package/dist/http-operation/errors.d.mts +13 -0
- package/dist/http-operation/errors.mjs +31 -0
- package/dist/http-operation/errors.mjs.map +1 -0
- package/dist/http-operation/models.d.mts +32 -0
- package/dist/http-operation/models.mjs +14 -0
- package/dist/http-operation/models.mjs.map +1 -0
- package/dist/http-operation/private.mjs +35 -0
- package/dist/http-operation/private.mjs.map +1 -0
- package/dist/http-operation/security.mjs +58 -0
- package/dist/http-operation/security.mjs.map +1 -0
- package/dist/http-operation/server.d.mts +33 -0
- package/dist/http-operation/server.mjs +268 -0
- package/dist/http-operation/server.mjs.map +1 -0
- package/dist/identity/ExternalIdentityMutation.d.mts +15 -0
- package/dist/identity/ExternalIdentityMutation.mjs +11 -0
- package/dist/identity/ExternalIdentityMutation.mjs.map +1 -0
- package/dist/identity/IdentityMutation.d.mts +22 -0
- package/dist/identity/IdentityMutation.mjs +17 -0
- package/dist/identity/IdentityMutation.mjs.map +1 -0
- package/dist/identity/IdentityRepository.d.mts +20 -0
- package/dist/identity/IdentityRepository.mjs +11 -0
- package/dist/identity/IdentityRepository.mjs.map +1 -0
- package/dist/identity/SubjectLifecycle.d.mts +58 -0
- package/dist/identity/SubjectLifecycle.mjs +43 -0
- package/dist/identity/SubjectLifecycle.mjs.map +1 -0
- package/dist/identity/SubjectProvisioner.d.mts +37 -0
- package/dist/identity/SubjectProvisioner.mjs +20 -0
- package/dist/identity/SubjectProvisioner.mjs.map +1 -0
- package/dist/identity/codecs.d.mts +34 -0
- package/dist/identity/codecs.mjs +40 -0
- package/dist/identity/codecs.mjs.map +1 -0
- package/dist/identity/models.d.mts +62 -0
- package/dist/identity/models.mjs +51 -0
- package/dist/identity/models.mjs.map +1 -0
- package/dist/identity/operations.d.mts +118 -0
- package/dist/identity/operations.mjs +124 -0
- package/dist/identity/operations.mjs.map +1 -0
- package/dist/index.d.mts +23 -0
- package/dist/index.mjs +23 -0
- package/dist/internal/AuthStoreDecisions.d.mts +22 -0
- package/dist/internal/AuthStoreDecisions.mjs +8 -0
- package/dist/internal/AuthStoreDecisions.mjs.map +1 -0
- package/dist/internal/CurrentSession.d.mts +9 -0
- package/dist/internal/CurrentSession.mjs +8 -0
- package/dist/internal/CurrentSession.mjs.map +1 -0
- package/dist/internal/diagnostics.mjs +23 -0
- package/dist/internal/diagnostics.mjs.map +1 -0
- package/dist/oauth/GithubOAuthProvider.d.mts +43 -0
- package/dist/oauth/GithubOAuthProvider.mjs +66 -0
- package/dist/oauth/GithubOAuthProvider.mjs.map +1 -0
- package/dist/oauth/OAuth.d.mts +73 -0
- package/dist/oauth/OAuth.mjs +180 -0
- package/dist/oauth/OAuth.mjs.map +1 -0
- package/dist/oauth/OAuthAccountsPersistence.d.mts +109 -0
- package/dist/oauth/OAuthAccountsPersistence.mjs +12 -0
- package/dist/oauth/OAuthAccountsPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthActionEvidence.d.mts +28 -0
- package/dist/oauth/OAuthActionEvidence.mjs +15 -0
- package/dist/oauth/OAuthActionEvidence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedActionEvidence.d.mts +22 -0
- package/dist/oauth/OAuthConnectedActionEvidence.mjs +9 -0
- package/dist/oauth/OAuthConnectedActionEvidence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedPersistence.d.mts +129 -0
- package/dist/oauth/OAuthConnectedPersistence.mjs +12 -0
- package/dist/oauth/OAuthConnectedPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedProtocol.d.mts +41 -0
- package/dist/oauth/OAuthConnectedProtocol.mjs +13 -0
- package/dist/oauth/OAuthConnectedProtocol.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedRevocations.d.mts +167 -0
- package/dist/oauth/OAuthConnectedRevocations.mjs +21 -0
- package/dist/oauth/OAuthConnectedRevocations.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedTokenProtector.d.mts +24 -0
- package/dist/oauth/OAuthConnectedTokenProtector.mjs +153 -0
- package/dist/oauth/OAuthConnectedTokenProtector.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.d.mts +23 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.mjs +37 -0
- package/dist/oauth/OAuthConnectedTransactionProtector.mjs.map +1 -0
- package/dist/oauth/OAuthConnectedUseAuthority.d.mts +22 -0
- package/dist/oauth/OAuthConnectedUseAuthority.mjs +10 -0
- package/dist/oauth/OAuthConnectedUseAuthority.mjs.map +1 -0
- package/dist/oauth/OAuthConnectionStore.d.mts +33 -0
- package/dist/oauth/OAuthConnectionStore.mjs +38 -0
- package/dist/oauth/OAuthConnectionStore.mjs.map +1 -0
- package/dist/oauth/OAuthLinkTransactionProtector.d.mts +25 -0
- package/dist/oauth/OAuthLinkTransactionProtector.mjs +39 -0
- package/dist/oauth/OAuthLinkTransactionProtector.mjs.map +1 -0
- package/dist/oauth/OAuthProtocol.d.mts +33 -0
- package/dist/oauth/OAuthProtocol.mjs +16 -0
- package/dist/oauth/OAuthProtocol.mjs.map +1 -0
- package/dist/oauth/OAuthProvider.d.mts +70 -0
- package/dist/oauth/OAuthProvider.mjs +39 -0
- package/dist/oauth/OAuthProvider.mjs.map +1 -0
- package/dist/oauth/OAuthProviders.d.mts +27 -0
- package/dist/oauth/OAuthProviders.mjs +33 -0
- package/dist/oauth/OAuthProviders.mjs.map +1 -0
- package/dist/oauth/OAuthRegistrationIntents.d.mts +87 -0
- package/dist/oauth/OAuthRegistrationIntents.mjs +19 -0
- package/dist/oauth/OAuthRegistrationIntents.mjs.map +1 -0
- package/dist/oauth/OAuthReturnTargets.d.mts +15 -0
- package/dist/oauth/OAuthReturnTargets.mjs +24 -0
- package/dist/oauth/OAuthReturnTargets.mjs.map +1 -0
- package/dist/oauth/OAuthSignInPersistence.d.mts +68 -0
- package/dist/oauth/OAuthSignInPersistence.mjs +12 -0
- package/dist/oauth/OAuthSignInPersistence.mjs.map +1 -0
- package/dist/oauth/OAuthStateDecisions.d.mts +14 -0
- package/dist/oauth/OAuthStateDecisions.mjs +8 -0
- package/dist/oauth/OAuthStateDecisions.mjs.map +1 -0
- package/dist/oauth/OAuthStateStore.d.mts +35 -0
- package/dist/oauth/OAuthStateStore.mjs +64 -0
- package/dist/oauth/OAuthStateStore.mjs.map +1 -0
- package/dist/oauth/OAuthTransactionProtector.d.mts +26 -0
- package/dist/oauth/OAuthTransactionProtector.mjs +78 -0
- package/dist/oauth/OAuthTransactionProtector.mjs.map +1 -0
- package/dist/oauth/accounts.d.mts +29 -0
- package/dist/oauth/accounts.mjs +515 -0
- package/dist/oauth/accounts.mjs.map +1 -0
- package/dist/oauth/accountsModels.d.mts +463 -0
- package/dist/oauth/accountsModels.mjs +155 -0
- package/dist/oauth/accountsModels.mjs.map +1 -0
- package/dist/oauth/connected.d.mts +442 -0
- package/dist/oauth/connected.mjs +526 -0
- package/dist/oauth/connected.mjs.map +1 -0
- package/dist/oauth/connectedAccess.d.mts +20 -0
- package/dist/oauth/connectedAccess.mjs +279 -0
- package/dist/oauth/connectedAccess.mjs.map +1 -0
- package/dist/oauth/connectedMaintenance.d.mts +19 -0
- package/dist/oauth/connectedMaintenance.mjs +133 -0
- package/dist/oauth/connectedMaintenance.mjs.map +1 -0
- package/dist/oauth/connectedModels.d.mts +2023 -0
- package/dist/oauth/connectedModels.mjs +375 -0
- package/dist/oauth/connectedModels.mjs.map +1 -0
- package/dist/oauth/definition.d.mts +4396 -0
- package/dist/oauth/definition.mjs +120 -0
- package/dist/oauth/definition.mjs.map +1 -0
- package/dist/oauth/errors.d.mts +49 -0
- package/dist/oauth/errors.mjs +42 -0
- package/dist/oauth/errors.mjs.map +1 -0
- package/dist/oauth/github/identity.d.mts +8 -0
- package/dist/oauth/github/identity.mjs +24 -0
- package/dist/oauth/github/identity.mjs.map +1 -0
- package/dist/oauth/github/models.d.mts +34 -0
- package/dist/oauth/github/protocol.d.mts +54 -0
- package/dist/oauth/github/protocol.mjs +204 -0
- package/dist/oauth/github/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/ProviderRevocation.d.mts +4 -0
- package/dist/oauth/openid-client/ProviderRevocation.mjs +11 -0
- package/dist/oauth/openid-client/ProviderRevocation.mjs.map +1 -0
- package/dist/oauth/openid-client/compatibility.d.mts +1 -0
- package/dist/oauth/openid-client/compatibility.mjs +6 -0
- package/dist/oauth/openid-client/compatibility.mjs.map +1 -0
- package/dist/oauth/openid-client/configuration.mjs +305 -0
- package/dist/oauth/openid-client/configuration.mjs.map +1 -0
- package/dist/oauth/openid-client/connected/configuration.mjs +338 -0
- package/dist/oauth/openid-client/connected/configuration.mjs.map +1 -0
- package/dist/oauth/openid-client/connected/models.d.mts +42 -0
- package/dist/oauth/openid-client/connected/protocol.d.mts +16 -0
- package/dist/oauth/openid-client/connected/protocol.mjs +402 -0
- package/dist/oauth/openid-client/connected/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/models.d.mts +67 -0
- package/dist/oauth/openid-client/models.mjs +16 -0
- package/dist/oauth/openid-client/models.mjs.map +1 -0
- package/dist/oauth/openid-client/protocol.d.mts +27 -0
- package/dist/oauth/openid-client/protocol.mjs +218 -0
- package/dist/oauth/openid-client/protocol.mjs.map +1 -0
- package/dist/oauth/openid-client/transport.mjs +59 -0
- package/dist/oauth/openid-client/transport.mjs.map +1 -0
- package/dist/oauth/policy.d.mts +18 -0
- package/dist/oauth/policy.mjs +16 -0
- package/dist/oauth/policy.mjs.map +1 -0
- package/dist/oauth/registration.d.mts +24 -0
- package/dist/oauth/registration.mjs +177 -0
- package/dist/oauth/registration.mjs.map +1 -0
- package/dist/oauth/registrationModels.d.mts +152 -0
- package/dist/oauth/registrationModels.mjs +93 -0
- package/dist/oauth/registrationModels.mjs.map +1 -0
- package/dist/oauth/registrationSecrets.mjs +70 -0
- package/dist/oauth/registrationSecrets.mjs.map +1 -0
- package/dist/oauth/schema.d.mts +86 -0
- package/dist/oauth/schema.mjs +81 -0
- package/dist/oauth/schema.mjs.map +1 -0
- package/dist/oauth/signInErrors.d.mts +17 -0
- package/dist/oauth/signInErrors.mjs +16 -0
- package/dist/oauth/signInErrors.mjs.map +1 -0
- package/dist/oauth/signInModels.d.mts +343 -0
- package/dist/oauth/signInModels.mjs +181 -0
- package/dist/oauth/signInModels.mjs.map +1 -0
- package/dist/oauth/signInModule.d.mts +1546 -0
- package/dist/oauth/signInModule.mjs +430 -0
- package/dist/oauth/signInModule.mjs.map +1 -0
- package/dist/oauth/signInSnapshot.mjs +29 -0
- package/dist/oauth/signInSnapshot.mjs.map +1 -0
- package/dist/oauth/transactionEncryption.d.mts +14 -0
- package/dist/oauth/transactionEncryption.mjs +129 -0
- package/dist/oauth/transactionEncryption.mjs.map +1 -0
- package/dist/operations/RequestBindingConfig.d.mts +11 -0
- package/dist/operations/RequestBindingConfig.mjs +10 -0
- package/dist/operations/RequestBindingConfig.mjs.map +1 -0
- package/dist/operations/actions.d.mts +947 -0
- package/dist/operations/actions.mjs +148 -0
- package/dist/operations/actions.mjs.map +1 -0
- package/dist/operations/context.d.mts +63 -0
- package/dist/operations/context.mjs +55 -0
- package/dist/operations/context.mjs.map +1 -0
- package/dist/operations/credentials.d.mts +39 -0
- package/dist/operations/credentials.mjs +60 -0
- package/dist/operations/credentials.mjs.map +1 -0
- package/dist/operations/errors.d.mts +24 -0
- package/dist/operations/errors.mjs +31 -0
- package/dist/operations/errors.mjs.map +1 -0
- package/dist/operations/operation.d.mts +124 -0
- package/dist/operations/operation.mjs +220 -0
- package/dist/operations/operation.mjs.map +1 -0
- package/dist/operations/requestBinding.d.mts +46 -0
- package/dist/operations/requestBinding.mjs +130 -0
- package/dist/operations/requestBinding.mjs.map +1 -0
- package/dist/operations/requestBindingModels.d.mts +13 -0
- package/dist/operations/requestBindingModels.mjs +12 -0
- package/dist/operations/requestBindingModels.mjs.map +1 -0
- package/dist/operations/reveals.d.mts +28 -0
- package/dist/operations/reveals.mjs +88 -0
- package/dist/operations/reveals.mjs.map +1 -0
- package/dist/passkey/PasskeyActionEvidence.d.mts +22 -0
- package/dist/passkey/PasskeyActionEvidence.mjs +9 -0
- package/dist/passkey/PasskeyActionEvidence.mjs.map +1 -0
- package/dist/passkey/PasskeyCredentials.d.mts +16 -0
- package/dist/passkey/PasskeyCredentials.mjs +9 -0
- package/dist/passkey/PasskeyCredentials.mjs.map +1 -0
- package/dist/passkey/PasskeyEnrollmentContext.d.mts +22 -0
- package/dist/passkey/PasskeyEnrollmentContext.mjs +9 -0
- package/dist/passkey/PasskeyEnrollmentContext.mjs.map +1 -0
- package/dist/passkey/PasskeyManagementPersistence.d.mts +106 -0
- package/dist/passkey/PasskeyManagementPersistence.mjs +9 -0
- package/dist/passkey/PasskeyManagementPersistence.mjs.map +1 -0
- package/dist/passkey/PasskeyPersistence.d.mts +63 -0
- package/dist/passkey/PasskeyPersistence.mjs +10 -0
- package/dist/passkey/PasskeyPersistence.mjs.map +1 -0
- package/dist/passkey/PasskeyProtocol.d.mts +38 -0
- package/dist/passkey/PasskeyProtocol.mjs +11 -0
- package/dist/passkey/PasskeyProtocol.mjs.map +1 -0
- package/dist/passkey/actions.d.mts +50 -0
- package/dist/passkey/actions.mjs +376 -0
- package/dist/passkey/actions.mjs.map +1 -0
- package/dist/passkey/browser/PasskeyBrowser.d.mts +18 -0
- package/dist/passkey/browser/PasskeyBrowser.mjs +9 -0
- package/dist/passkey/browser/PasskeyBrowser.mjs.map +1 -0
- package/dist/passkey/browser/models.d.mts +38 -0
- package/dist/passkey/browser/models.mjs +41 -0
- package/dist/passkey/browser/models.mjs.map +1 -0
- package/dist/passkey/browser/simplewebauthn.d.mts +17 -0
- package/dist/passkey/browser/simplewebauthn.mjs +411 -0
- package/dist/passkey/browser/simplewebauthn.mjs.map +1 -0
- package/dist/passkey/definition.d.mts +5626 -0
- package/dist/passkey/definition.mjs +114 -0
- package/dist/passkey/definition.mjs.map +1 -0
- package/dist/passkey/errors.d.mts +20 -0
- package/dist/passkey/errors.mjs +20 -0
- package/dist/passkey/errors.mjs.map +1 -0
- package/dist/passkey/management.mjs +276 -0
- package/dist/passkey/management.mjs.map +1 -0
- package/dist/passkey/models.d.mts +1245 -0
- package/dist/passkey/models.mjs +301 -0
- package/dist/passkey/models.mjs.map +1 -0
- package/dist/passkey/module.d.mts +2132 -0
- package/dist/passkey/module.mjs +174 -0
- package/dist/passkey/module.mjs.map +1 -0
- package/dist/passkey/pending.mjs +99 -0
- package/dist/passkey/pending.mjs.map +1 -0
- package/dist/passkey/policy.d.mts +48 -0
- package/dist/passkey/policy.mjs +77 -0
- package/dist/passkey/policy.mjs.map +1 -0
- package/dist/passkey/registration.mjs +107 -0
- package/dist/passkey/registration.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/configuration.mjs +45 -0
- package/dist/passkey/simplewebauthn/configuration.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/models.d.mts +21 -0
- package/dist/passkey/simplewebauthn/models.mjs +8 -0
- package/dist/passkey/simplewebauthn/models.mjs.map +1 -0
- package/dist/passkey/simplewebauthn/protocol.d.mts +62 -0
- package/dist/passkey/simplewebauthn/protocol.mjs +402 -0
- package/dist/passkey/simplewebauthn/protocol.mjs.map +1 -0
- package/dist/passkey/snapshot.mjs +31 -0
- package/dist/passkey/snapshot.mjs.map +1 -0
- package/dist/passkey/stepUp.mjs +101 -0
- package/dist/passkey/stepUp.mjs.map +1 -0
- package/dist/password/CompromisedPasswords.d.mts +26 -0
- package/dist/password/CompromisedPasswords.mjs +23 -0
- package/dist/password/CompromisedPasswords.mjs.map +1 -0
- package/dist/password/NewPasswordCheck.d.mts +21 -0
- package/dist/password/NewPasswordCheck.mjs +39 -0
- package/dist/password/NewPasswordCheck.mjs.map +1 -0
- package/dist/password/PasswordHashing.d.mts +24 -0
- package/dist/password/PasswordHashing.mjs +96 -0
- package/dist/password/PasswordHashing.mjs.map +1 -0
- package/dist/password/PasswordKdfAdmission.d.mts +19 -0
- package/dist/password/PasswordKdfAdmission.mjs +25 -0
- package/dist/password/PasswordKdfAdmission.mjs.map +1 -0
- package/dist/password/configuration.d.mts +43 -0
- package/dist/password/configuration.mjs +64 -0
- package/dist/password/configuration.mjs.map +1 -0
- package/dist/password/defaults.mjs +13 -0
- package/dist/password/defaults.mjs.map +1 -0
- package/dist/password/encoding.mjs +64 -0
- package/dist/password/encoding.mjs.map +1 -0
- package/dist/password/errors.d.mts +28 -0
- package/dist/password/errors.mjs +25 -0
- package/dist/password/errors.mjs.map +1 -0
- package/dist/password/methods/PasswordActionEvidence.d.mts +38 -0
- package/dist/password/methods/PasswordActionEvidence.mjs +22 -0
- package/dist/password/methods/PasswordActionEvidence.mjs.map +1 -0
- package/dist/password/methods/PasswordPersistence.d.mts +102 -0
- package/dist/password/methods/PasswordPersistence.mjs +13 -0
- package/dist/password/methods/PasswordPersistence.mjs.map +1 -0
- package/dist/password/methods/PasswordPreparedPersistence.d.mts +111 -0
- package/dist/password/methods/contracts.d.mts +43 -0
- package/dist/password/methods/contracts.mjs +33 -0
- package/dist/password/methods/contracts.mjs.map +1 -0
- package/dist/password/methods/definition.d.mts +3813 -0
- package/dist/password/methods/definition.mjs +56 -0
- package/dist/password/methods/definition.mjs.map +1 -0
- package/dist/password/methods/errors.d.mts +15 -0
- package/dist/password/methods/errors.mjs +11 -0
- package/dist/password/methods/errors.mjs.map +1 -0
- package/dist/password/methods/models.d.mts +70 -0
- package/dist/password/methods/models.mjs +44 -0
- package/dist/password/methods/models.mjs.map +1 -0
- package/dist/password/methods/module.d.mts +3567 -0
- package/dist/password/methods/module.mjs +553 -0
- package/dist/password/methods/module.mjs.map +1 -0
- package/dist/password/methods/policy.d.mts +84 -0
- package/dist/password/methods/policy.mjs +80 -0
- package/dist/password/methods/policy.mjs.map +1 -0
- package/dist/password/methods/preparation.mjs +54 -0
- package/dist/password/methods/preparation.mjs.map +1 -0
- package/dist/password/methods/prepared.d.mts +53 -0
- package/dist/password/methods/prepared.mjs +610 -0
- package/dist/password/methods/prepared.mjs.map +1 -0
- package/dist/password/methods/preparedModels.d.mts +1295 -0
- package/dist/password/methods/preparedModels.mjs +278 -0
- package/dist/password/methods/preparedModels.mjs.map +1 -0
- package/dist/password/methods/signIn.d.mts +180 -0
- package/dist/password/methods/signIn.mjs +73 -0
- package/dist/password/methods/signIn.mjs.map +1 -0
- package/dist/password/methods/snapshot.mjs +38 -0
- package/dist/password/methods/snapshot.mjs.map +1 -0
- package/dist/password/methods/verification.mjs +138 -0
- package/dist/password/methods/verification.mjs.map +1 -0
- package/dist/password/models.d.mts +13 -0
- package/dist/password/models.mjs +12 -0
- package/dist/password/models.mjs.map +1 -0
- package/dist/password/policy.d.mts +33 -0
- package/dist/password/policy.mjs +37 -0
- package/dist/password/policy.mjs.map +1 -0
- package/dist/phone/PhoneActionEvidence.d.mts +23 -0
- package/dist/phone/PhoneActionEvidence.mjs +10 -0
- package/dist/phone/PhoneActionEvidence.mjs.map +1 -0
- package/dist/phone/PhoneAdmission.d.mts +29 -0
- package/dist/phone/PhoneAdmission.mjs +10 -0
- package/dist/phone/PhoneAdmission.mjs.map +1 -0
- package/dist/phone/PhoneDeliveryEligibility.d.mts +11 -0
- package/dist/phone/PhoneDeliveryEligibility.mjs +8 -0
- package/dist/phone/PhoneDeliveryEligibility.mjs.map +1 -0
- package/dist/phone/PhonePersistence.d.mts +33 -0
- package/dist/phone/PhonePersistence.mjs +10 -0
- package/dist/phone/PhonePersistence.mjs.map +1 -0
- package/dist/phone/PhoneRequestContext.d.mts +10 -0
- package/dist/phone/PhoneRequestContext.mjs +8 -0
- package/dist/phone/PhoneRequestContext.mjs.map +1 -0
- package/dist/phone/PhoneSignInTargets.d.mts +19 -0
- package/dist/phone/PhoneSignInTargets.mjs +13 -0
- package/dist/phone/PhoneSignInTargets.mjs.map +1 -0
- package/dist/phone/definition.d.mts +7190 -0
- package/dist/phone/definition.mjs +28 -0
- package/dist/phone/definition.mjs.map +1 -0
- package/dist/phone/failure.mjs +23 -0
- package/dist/phone/failure.mjs.map +1 -0
- package/dist/phone/lifecycle.mjs +427 -0
- package/dist/phone/lifecycle.mjs.map +1 -0
- package/dist/phone/lifecycleModels.d.mts +164 -0
- package/dist/phone/lifecycleModels.mjs +91 -0
- package/dist/phone/lifecycleModels.mjs.map +1 -0
- package/dist/phone/models.d.mts +41 -0
- package/dist/phone/models.mjs +29 -0
- package/dist/phone/models.mjs.map +1 -0
- package/dist/phone/module.d.mts +6027 -0
- package/dist/phone/module.mjs +293 -0
- package/dist/phone/module.mjs.map +1 -0
- package/dist/proofs/EmailProofDelivery.d.mts +13 -0
- package/dist/proofs/EmailProofDelivery.mjs +11 -0
- package/dist/proofs/EmailProofDelivery.mjs.map +1 -0
- package/dist/proofs/HostIngressLimiter.d.mts +20 -0
- package/dist/proofs/HostIngressLimiter.mjs +13 -0
- package/dist/proofs/HostIngressLimiter.mjs.map +1 -0
- package/dist/proofs/ProofPersistence.d.mts +140 -0
- package/dist/proofs/ProofPersistence.mjs +13 -0
- package/dist/proofs/ProofPersistence.mjs.map +1 -0
- package/dist/proofs/SmsProofDelivery.d.mts +13 -0
- package/dist/proofs/SmsProofDelivery.mjs +11 -0
- package/dist/proofs/SmsProofDelivery.mjs.map +1 -0
- package/dist/proofs/abuse.d.mts +15 -0
- package/dist/proofs/abuse.mjs +12 -0
- package/dist/proofs/abuse.mjs.map +1 -0
- package/dist/proofs/completion.d.mts +22 -0
- package/dist/proofs/crypto.d.mts +196 -0
- package/dist/proofs/crypto.mjs +189 -0
- package/dist/proofs/crypto.mjs.map +1 -0
- package/dist/proofs/definition.d.mts +335 -0
- package/dist/proofs/definition.mjs +10 -0
- package/dist/proofs/definition.mjs.map +1 -0
- package/dist/proofs/delivery.d.mts +30 -0
- package/dist/proofs/delivery.mjs +26 -0
- package/dist/proofs/delivery.mjs.map +1 -0
- package/dist/proofs/dispatch.d.mts +20 -0
- package/dist/proofs/dispatch.mjs +54 -0
- package/dist/proofs/dispatch.mjs.map +1 -0
- package/dist/proofs/errors.d.mts +21 -0
- package/dist/proofs/errors.mjs +25 -0
- package/dist/proofs/errors.mjs.map +1 -0
- package/dist/proofs/models.d.mts +141 -0
- package/dist/proofs/models.mjs +93 -0
- package/dist/proofs/models.mjs.map +1 -0
- package/dist/proofs/module.d.mts +344 -0
- package/dist/proofs/module.mjs +350 -0
- package/dist/proofs/module.mjs.map +1 -0
- package/dist/proofs/policy.d.mts +152 -0
- package/dist/proofs/policy.mjs +51 -0
- package/dist/proofs/policy.mjs.map +1 -0
- package/dist/sessions/AuthenticationAuthority.d.mts +31 -0
- package/dist/sessions/AuthenticationAuthority.mjs +8 -0
- package/dist/sessions/AuthenticationAuthority.mjs.map +1 -0
- package/dist/sessions/PendingAuthentication.d.mts +108 -0
- package/dist/sessions/PendingAuthentication.mjs +40 -0
- package/dist/sessions/PendingAuthentication.mjs.map +1 -0
- package/dist/sessions/SessionStepUpPersistence.d.mts +152 -0
- package/dist/sessions/SessionStepUpPersistence.mjs +63 -0
- package/dist/sessions/SessionStepUpPersistence.mjs.map +1 -0
- package/dist/sessions/assurance.d.mts +163 -0
- package/dist/sessions/assurance.mjs +95 -0
- package/dist/sessions/assurance.mjs.map +1 -0
- package/dist/sessions/commit.d.mts +13 -0
- package/dist/sessions/configuration.d.mts +46 -0
- package/dist/sessions/configuration.mjs +55 -0
- package/dist/sessions/configuration.mjs.map +1 -0
- package/dist/sessions/contract.d.mts +663 -0
- package/dist/sessions/contract.mjs +174 -0
- package/dist/sessions/contract.mjs.map +1 -0
- package/dist/sessions/crypto.d.mts +24 -0
- package/dist/sessions/crypto.mjs +106 -0
- package/dist/sessions/crypto.mjs.map +1 -0
- package/dist/sessions/definition.d.mts +11 -0
- package/dist/sessions/definition.mjs +10 -0
- package/dist/sessions/definition.mjs.map +1 -0
- package/dist/sessions/errors.d.mts +35 -0
- package/dist/sessions/errors.mjs +34 -0
- package/dist/sessions/errors.mjs.map +1 -0
- package/dist/sessions/invalidation.d.mts +23 -0
- package/dist/sessions/invalidation.mjs +33 -0
- package/dist/sessions/invalidation.mjs.map +1 -0
- package/dist/sessions/models.d.mts +143 -0
- package/dist/sessions/models.mjs +94 -0
- package/dist/sessions/models.mjs.map +1 -0
- package/dist/sessions/module.d.mts +1091 -0
- package/dist/sessions/module.mjs +943 -0
- package/dist/sessions/module.mjs.map +1 -0
- package/dist/sessions/persistence.d.mts +93 -0
- package/dist/sessions/policy.d.mts +80 -0
- package/dist/sessions/policy.mjs +66 -0
- package/dist/sessions/policy.mjs.map +1 -0
- package/dist/testing/conformance/AuthStore.d.mts +11 -0
- package/dist/testing/conformance/AuthStore.mjs +173 -0
- package/dist/testing/conformance/AuthStore.mjs.map +1 -0
- package/dist/testing/conformance/OAuthConnectionStore.d.mts +11 -0
- package/dist/testing/conformance/OAuthConnectionStore.mjs +102 -0
- package/dist/testing/conformance/OAuthConnectionStore.mjs.map +1 -0
- package/dist/testing/conformance/OAuthStateStore.d.mts +11 -0
- package/dist/testing/conformance/OAuthStateStore.mjs +45 -0
- package/dist/testing/conformance/OAuthStateStore.mjs.map +1 -0
- package/dist/testing/conformance/PasswordCredentialStore.d.mts +20 -0
- package/dist/testing/conformance/PasswordCredentialStore.mjs +103 -0
- package/dist/testing/conformance/PasswordCredentialStore.mjs.map +1 -0
- package/dist/testing/conformance/support.mjs +17 -0
- package/dist/testing/conformance/support.mjs.map +1 -0
- package/dist/testing/crypto.d.mts +11 -0
- package/dist/testing/crypto.mjs +41 -0
- package/dist/testing/crypto.mjs.map +1 -0
- package/dist/testing/keyring.d.mts +9 -0
- package/dist/testing/keyring.mjs +17 -0
- package/dist/testing/keyring.mjs.map +1 -0
- package/dist/totp/TotpActionEvidence.d.mts +18 -0
- package/dist/totp/TotpActionEvidence.mjs +8 -0
- package/dist/totp/TotpActionEvidence.mjs.map +1 -0
- package/dist/totp/TotpPersistence.d.mts +19 -0
- package/dist/totp/TotpPersistence.mjs +8 -0
- package/dist/totp/TotpPersistence.mjs.map +1 -0
- package/dist/totp/TotpSecretKeys.d.mts +15 -0
- package/dist/totp/TotpSecretKeys.mjs +8 -0
- package/dist/totp/TotpSecretKeys.mjs.map +1 -0
- package/dist/totp/crypto.mjs +96 -0
- package/dist/totp/crypto.mjs.map +1 -0
- package/dist/totp/definition.d.mts +764 -0
- package/dist/totp/definition.mjs +24 -0
- package/dist/totp/definition.mjs.map +1 -0
- package/dist/totp/errors.d.mts +16 -0
- package/dist/totp/errors.mjs +18 -0
- package/dist/totp/errors.mjs.map +1 -0
- package/dist/totp/models.d.mts +377 -0
- package/dist/totp/models.mjs +137 -0
- package/dist/totp/models.mjs.map +1 -0
- package/dist/totp/module.d.mts +737 -0
- package/dist/totp/module.mjs +355 -0
- package/dist/totp/module.mjs.map +1 -0
- package/package.json +1 -0
- package/src/Atom.ts +4 -0
- package/src/Auth.ts +16 -0
- package/src/AuthContract.ts +17 -0
- package/src/AuthSession.ts +298 -0
- package/src/AuthStore.ts +367 -0
- package/src/AuthTokenCodec.ts +226 -0
- package/src/Client.ts +9 -0
- package/src/Cloudflare.ts +345 -0
- package/src/Drizzle.ts +378 -0
- package/src/DrizzleD1.ts +136 -0
- package/src/DrizzleLibsql.ts +288 -0
- package/src/DrizzleMysql2.ts +184 -0
- package/src/DrizzlePglite.ts +160 -0
- package/src/DrizzlePostgres.ts +160 -0
- package/src/DrizzleSqliteBun.ts +244 -0
- package/src/DrizzleSqliteDo.ts +473 -0
- package/src/DrizzleSqliteNode.ts +245 -0
- package/src/DrizzleSqliteWasm.ts +245 -0
- package/src/Email.ts +55 -0
- package/src/EmailOtp.ts +250 -0
- package/src/EmailOtpSender.ts +28 -0
- package/src/Errors.ts +103 -0
- package/src/GitHub.ts +16 -0
- package/src/Hooks.ts +50 -0
- package/src/Http.ts +47 -0
- package/src/HttpServer.ts +742 -0
- package/src/Identity.ts +53 -0
- package/src/IdentityResolver.ts +18 -0
- package/src/OAuth.ts +242 -0
- package/src/OpenIdClient.ts +13 -0
- package/src/OpenIdClientConnected.ts +18 -0
- package/src/OperationHttp.ts +14 -0
- package/src/OperationHttpClient.ts +6 -0
- package/src/OperationHttpServer.ts +15 -0
- package/src/Operations.ts +69 -0
- package/src/Passkey.ts +81 -0
- package/src/PasskeyBrowser.ts +19 -0
- package/src/PasskeyContract.ts +212 -0
- package/src/PasskeyPassword.ts +319 -0
- package/src/PasskeySimpleWebAuthn.ts +6 -0
- package/src/Password.ts +113 -0
- package/src/PasswordAuth.ts +197 -0
- package/src/PasswordCredentialStore.ts +140 -0
- package/src/PasswordHasher.ts +147 -0
- package/src/PhoneOtp.ts +32 -0
- package/src/Policy.ts +95 -0
- package/src/Proofs.ts +71 -0
- package/src/Rpc.ts +15 -0
- package/src/Schema.ts +235 -0
- package/src/SessionContract.ts +2 -0
- package/src/Sessions.ts +105 -0
- package/src/Testing.ts +24 -0
- package/src/Totp.ts +28 -0
- package/src/TotpContract.ts +147 -0
- package/src/WebCrypto.ts +61 -0
- package/src/Workflows.ts +12 -0
- package/src/atom/AuthAtomLifetime.ts +87 -0
- package/src/atom/AuthAtomWorkflow.ts +27 -0
- package/src/atom/client.ts +364 -0
- package/src/atom/operations.ts +183 -0
- package/src/atom/scoped-runtime.ts +249 -0
- package/src/auth/Auth.ts +482 -0
- package/src/auth/AuthConfigurationError.ts +9 -0
- package/src/auth/AuthRequest.ts +21 -0
- package/src/auth/AuthStrategy.ts +116 -0
- package/src/auth/ConsumeDecision.ts +4 -0
- package/src/auth/actions.ts +220 -0
- package/src/auth/defaults.ts +23 -0
- package/src/auth/definition.ts +88 -0
- package/src/auth/session.ts +146 -0
- package/src/drizzle/D1BatchStatements.ts +10 -0
- package/src/drizzle/PasswordPreparedPostconditions.ts +30 -0
- package/src/drizzle/SuppliedService.ts +10 -0
- package/src/drizzle/d1-emails.ts +1808 -0
- package/src/drizzle/d1-generated-statement.ts +129 -0
- package/src/drizzle/d1-identity.ts +374 -0
- package/src/drizzle/d1-oauth.ts +338 -0
- package/src/drizzle/d1-passkey.ts +371 -0
- package/src/drizzle/d1-password-prepared.ts +1273 -0
- package/src/drizzle/d1-passwords.ts +2661 -0
- package/src/drizzle/d1-phone.ts +94 -0
- package/src/drizzle/d1-planning.ts +105 -0
- package/src/drizzle/d1-proofs.ts +2305 -0
- package/src/drizzle/d1-sessions.ts +2867 -0
- package/src/drizzle/d1-totp.ts +79 -0
- package/src/drizzle/email-model.ts +512 -0
- package/src/drizzle/email-registration.ts +696 -0
- package/src/drizzle/email-sql.ts +1468 -0
- package/src/drizzle/email-target.ts +243 -0
- package/src/drizzle/model.ts +492 -0
- package/src/drizzle/mysql-emails.ts +323 -0
- package/src/drizzle/mysql-identity.ts +323 -0
- package/src/drizzle/mysql-password-prepared.ts +206 -0
- package/src/drizzle/mysql-passwords.ts +341 -0
- package/src/drizzle/mysql-proofs.ts +183 -0
- package/src/drizzle/mysql-sessions.ts +742 -0
- package/src/drizzle/mysql.ts +686 -0
- package/src/drizzle/oauth-accounts.ts +801 -0
- package/src/drizzle/oauth-connected-access.ts +354 -0
- package/src/drizzle/oauth-connected-collection.ts +324 -0
- package/src/drizzle/oauth-connected-custody.ts +277 -0
- package/src/drizzle/oauth-connected-drivers.ts +463 -0
- package/src/drizzle/oauth-connected-flow.ts +439 -0
- package/src/drizzle/oauth-connected-input.ts +128 -0
- package/src/drizzle/oauth-connected-maintenance.ts +345 -0
- package/src/drizzle/oauth-connected-management.ts +365 -0
- package/src/drizzle/oauth-connected-model.ts +347 -0
- package/src/drizzle/oauth-connected-reference.ts +112 -0
- package/src/drizzle/oauth-connected-settlement.ts +226 -0
- package/src/drizzle/oauth-connected-state.ts +846 -0
- package/src/drizzle/oauth-connected-target.ts +264 -0
- package/src/drizzle/oauth-drivers.ts +567 -0
- package/src/drizzle/oauth-flow.ts +461 -0
- package/src/drizzle/oauth-input.ts +205 -0
- package/src/drizzle/oauth-model.ts +610 -0
- package/src/drizzle/oauth-mysql.ts +10 -0
- package/src/drizzle/oauth-owner.ts +29 -0
- package/src/drizzle/oauth-registration.ts +638 -0
- package/src/drizzle/oauth-state.ts +213 -0
- package/src/drizzle/oauth-target.ts +751 -0
- package/src/drizzle/passkey-admission.ts +333 -0
- package/src/drizzle/passkey-credentials.ts +465 -0
- package/src/drizzle/passkey-drivers.ts +385 -0
- package/src/drizzle/passkey-enrollment.ts +280 -0
- package/src/drizzle/passkey-flow.ts +983 -0
- package/src/drizzle/passkey-management.ts +369 -0
- package/src/drizzle/passkey-model.ts +350 -0
- package/src/drizzle/passkey-registration-ceremony-model.ts +69 -0
- package/src/drizzle/passkey-registration-ceremony.ts +254 -0
- package/src/drizzle/passkey-registration-custody.ts +82 -0
- package/src/drizzle/passkey-registration-write.ts +378 -0
- package/src/drizzle/passkey-state.ts +307 -0
- package/src/drizzle/passkey-target.ts +528 -0
- package/src/drizzle/passkey-write-drivers.ts +396 -0
- package/src/drizzle/passkey-write-model.ts +265 -0
- package/src/drizzle/passkey-write-state.ts +627 -0
- package/src/drizzle/passkey-write-target.ts +406 -0
- package/src/drizzle/password-model.ts +491 -0
- package/src/drizzle/password-prepared-model.ts +259 -0
- package/src/drizzle/password-prepared-sql.ts +1198 -0
- package/src/drizzle/password-prepared-state.ts +232 -0
- package/src/drizzle/password-prepared-target.ts +158 -0
- package/src/drizzle/password-registration.ts +372 -0
- package/src/drizzle/password-sql.ts +2082 -0
- package/src/drizzle/password-target.ts +223 -0
- package/src/drizzle/pg-emails.ts +323 -0
- package/src/drizzle/pg-password-prepared.ts +207 -0
- package/src/drizzle/pg-passwords.ts +340 -0
- package/src/drizzle/pg-proofs.ts +193 -0
- package/src/drizzle/pg-sessions.ts +751 -0
- package/src/drizzle/pg.ts +982 -0
- package/src/drizzle/phone-model.ts +185 -0
- package/src/drizzle/phone-state.ts +802 -0
- package/src/drizzle/phone-target.ts +471 -0
- package/src/drizzle/proof-model.ts +398 -0
- package/src/drizzle/proof-sql.ts +1912 -0
- package/src/drizzle/proof-target.ts +120 -0
- package/src/drizzle/session-model.ts +368 -0
- package/src/drizzle/session-sql.ts +2152 -0
- package/src/drizzle/session-target.ts +335 -0
- package/src/drizzle/sqlite-emails.ts +368 -0
- package/src/drizzle/sqlite-identity.ts +343 -0
- package/src/drizzle/sqlite-password-prepared.ts +262 -0
- package/src/drizzle/sqlite-passwords.ts +499 -0
- package/src/drizzle/sqlite-proofs.ts +204 -0
- package/src/drizzle/sqlite-sessions.ts +972 -0
- package/src/drizzle/sqlite.ts +704 -0
- package/src/drizzle/standalone-guard.ts +38 -0
- package/src/drizzle/step-up-model.ts +129 -0
- package/src/drizzle/step-up-state.ts +141 -0
- package/src/drizzle/totp-model.ts +91 -0
- package/src/drizzle/totp-state.ts +520 -0
- package/src/drizzle/totp-target.ts +304 -0
- package/src/drizzle/transaction-execution.ts +290 -0
- package/src/drizzle/transaction-mysql.ts +104 -0
- package/src/drizzle/transaction-owner.ts +570 -0
- package/src/email/EmailActionEvidence.ts +37 -0
- package/src/email/EmailAddressPersistence.ts +71 -0
- package/src/email/EmailIdentifierNotifier.ts +48 -0
- package/src/email/EmailReturnTargets.ts +50 -0
- package/src/email/EmailSignInTargets.ts +20 -0
- package/src/email/addresses.ts +630 -0
- package/src/email/definition.ts +309 -0
- package/src/email/errors.ts +23 -0
- package/src/email/magicLink.ts +84 -0
- package/src/email/models.ts +50 -0
- package/src/email/module.ts +664 -0
- package/src/email/registration.ts +415 -0
- package/src/email/snapshot.ts +51 -0
- package/src/hooks/LifecycleHooks.ts +136 -0
- package/src/hooks/commit.ts +271 -0
- package/src/hooks/models.ts +111 -0
- package/src/hooks/plugins.ts +87 -0
- package/src/hooks/transactions.ts +51 -0
- package/src/http/auth-api.ts +17 -0
- package/src/http/auth-contract.ts +148 -0
- package/src/http/auth-http.ts +467 -0
- package/src/http/endpoints/get-session.ts +9 -0
- package/src/http/endpoints/password-sign-in.ts +19 -0
- package/src/http/endpoints/request-email-otp.ts +10 -0
- package/src/http/endpoints/set-password.ts +18 -0
- package/src/http/endpoints/sign-out.ts +5 -0
- package/src/http/endpoints/verify-email-otp.ts +15 -0
- package/src/http/models.ts +80 -0
- package/src/http/security.ts +102 -0
- package/src/http/session-contract.ts +92 -0
- package/src/http-operation/OperationHttpInvocation.ts +39 -0
- package/src/http-operation/OperationHttpServerConfig.ts +124 -0
- package/src/http-operation/auth-client.ts +273 -0
- package/src/http-operation/client.ts +453 -0
- package/src/http-operation/configuration-schema.ts +19 -0
- package/src/http-operation/contract.ts +116 -0
- package/src/http-operation/errors.ts +38 -0
- package/src/http-operation/models.ts +42 -0
- package/src/http-operation/private.ts +50 -0
- package/src/http-operation/security.ts +93 -0
- package/src/http-operation/server.ts +544 -0
- package/src/identity/ExternalIdentityMutation.ts +18 -0
- package/src/identity/IdentityMutation.ts +41 -0
- package/src/identity/IdentityRepository.ts +37 -0
- package/src/identity/SubjectLifecycle.ts +80 -0
- package/src/identity/SubjectProvisioner.ts +40 -0
- package/src/identity/codecs.ts +54 -0
- package/src/identity/models.ts +82 -0
- package/src/identity/operations.ts +182 -0
- package/src/index.ts +23 -0
- package/src/internal/AuthStoreDecisions.ts +23 -0
- package/src/internal/CurrentSession.ts +8 -0
- package/src/internal/diagnostics.ts +71 -0
- package/src/oauth/GithubOAuthProvider.ts +106 -0
- package/src/oauth/OAuth.ts +436 -0
- package/src/oauth/OAuthAccountsPersistence.ts +142 -0
- package/src/oauth/OAuthActionEvidence.ts +31 -0
- package/src/oauth/OAuthConnectedActionEvidence.ts +28 -0
- package/src/oauth/OAuthConnectedPersistence.ts +163 -0
- package/src/oauth/OAuthConnectedProtocol.ts +54 -0
- package/src/oauth/OAuthConnectedRevocations.ts +48 -0
- package/src/oauth/OAuthConnectedTokenProtector.ts +240 -0
- package/src/oauth/OAuthConnectedTransactionProtector.ts +56 -0
- package/src/oauth/OAuthConnectedUseAuthority.ts +26 -0
- package/src/oauth/OAuthConnectionStore.ts +59 -0
- package/src/oauth/OAuthLinkTransactionProtector.ts +58 -0
- package/src/oauth/OAuthProtocol.ts +39 -0
- package/src/oauth/OAuthProvider.ts +126 -0
- package/src/oauth/OAuthProviders.ts +53 -0
- package/src/oauth/OAuthRegistrationIntents.ts +42 -0
- package/src/oauth/OAuthReturnTargets.ts +44 -0
- package/src/oauth/OAuthSignInPersistence.ts +91 -0
- package/src/oauth/OAuthStateDecisions.ts +16 -0
- package/src/oauth/OAuthStateStore.ts +102 -0
- package/src/oauth/OAuthTransactionProtector.ts +103 -0
- package/src/oauth/accounts.ts +987 -0
- package/src/oauth/accountsModels.ts +214 -0
- package/src/oauth/connected.ts +995 -0
- package/src/oauth/connectedAccess.ts +644 -0
- package/src/oauth/connectedMaintenance.ts +248 -0
- package/src/oauth/connectedModels.ts +495 -0
- package/src/oauth/definition.ts +414 -0
- package/src/oauth/errors.ts +78 -0
- package/src/oauth/github/identity.ts +26 -0
- package/src/oauth/github/models.ts +37 -0
- package/src/oauth/github/protocol.ts +329 -0
- package/src/oauth/openid-client/ProviderRevocation.ts +22 -0
- package/src/oauth/openid-client/compatibility.ts +47 -0
- package/src/oauth/openid-client/configuration.ts +472 -0
- package/src/oauth/openid-client/connected/configuration.ts +565 -0
- package/src/oauth/openid-client/connected/models.ts +58 -0
- package/src/oauth/openid-client/connected/protocol.ts +866 -0
- package/src/oauth/openid-client/models.ts +78 -0
- package/src/oauth/openid-client/protocol.ts +437 -0
- package/src/oauth/openid-client/transport.ts +67 -0
- package/src/oauth/policy.ts +26 -0
- package/src/oauth/registration.ts +410 -0
- package/src/oauth/registrationModels.ts +115 -0
- package/src/oauth/registrationSecrets.ts +127 -0
- package/src/oauth/schema.ts +102 -0
- package/src/oauth/signInErrors.ts +23 -0
- package/src/oauth/signInModels.ts +266 -0
- package/src/oauth/signInModule.ts +875 -0
- package/src/oauth/signInSnapshot.ts +37 -0
- package/src/oauth/transactionEncryption.ts +198 -0
- package/src/operations/RequestBindingConfig.ts +12 -0
- package/src/operations/actions.ts +342 -0
- package/src/operations/context.ts +130 -0
- package/src/operations/credentials.ts +121 -0
- package/src/operations/errors.ts +53 -0
- package/src/operations/operation.ts +740 -0
- package/src/operations/requestBinding.ts +237 -0
- package/src/operations/requestBindingModels.ts +18 -0
- package/src/operations/reveals.ts +147 -0
- package/src/passkey/PasskeyActionEvidence.ts +25 -0
- package/src/passkey/PasskeyCredentials.ts +16 -0
- package/src/passkey/PasskeyEnrollmentContext.ts +26 -0
- package/src/passkey/PasskeyManagementPersistence.ts +124 -0
- package/src/passkey/PasskeyPersistence.ts +85 -0
- package/src/passkey/PasskeyProtocol.ts +48 -0
- package/src/passkey/actions.ts +905 -0
- package/src/passkey/browser/PasskeyBrowser.ts +26 -0
- package/src/passkey/browser/models.ts +67 -0
- package/src/passkey/browser/simplewebauthn.ts +621 -0
- package/src/passkey/definition.ts +386 -0
- package/src/passkey/errors.ts +39 -0
- package/src/passkey/management.ts +552 -0
- package/src/passkey/models.ts +414 -0
- package/src/passkey/module.ts +367 -0
- package/src/passkey/pending.ts +203 -0
- package/src/passkey/policy.ts +88 -0
- package/src/passkey/registration.ts +251 -0
- package/src/passkey/simplewebauthn/configuration.ts +97 -0
- package/src/passkey/simplewebauthn/models.ts +9 -0
- package/src/passkey/simplewebauthn/protocol.ts +729 -0
- package/src/passkey/snapshot.ts +48 -0
- package/src/passkey/stepUp.ts +212 -0
- package/src/password/CompromisedPasswords.ts +36 -0
- package/src/password/NewPasswordCheck.ts +89 -0
- package/src/password/PasswordHashing.ts +209 -0
- package/src/password/PasswordKdfAdmission.ts +44 -0
- package/src/password/configuration.ts +52 -0
- package/src/password/defaults.ts +15 -0
- package/src/password/encoding.ts +137 -0
- package/src/password/errors.ts +43 -0
- package/src/password/methods/PasswordActionEvidence.ts +41 -0
- package/src/password/methods/PasswordPersistence.ts +128 -0
- package/src/password/methods/PasswordPreparedPersistence.ts +123 -0
- package/src/password/methods/contracts.ts +47 -0
- package/src/password/methods/definition.ts +199 -0
- package/src/password/methods/errors.ts +26 -0
- package/src/password/methods/models.ts +80 -0
- package/src/password/methods/module.ts +986 -0
- package/src/password/methods/policy.ts +68 -0
- package/src/password/methods/preparation.ts +73 -0
- package/src/password/methods/prepared.ts +1199 -0
- package/src/password/methods/preparedModels.ts +496 -0
- package/src/password/methods/signIn.ts +136 -0
- package/src/password/methods/snapshot.ts +53 -0
- package/src/password/methods/verification.ts +266 -0
- package/src/password/models.ts +15 -0
- package/src/password/policy.ts +41 -0
- package/src/phone/PhoneActionEvidence.ts +26 -0
- package/src/phone/PhoneAdmission.ts +29 -0
- package/src/phone/PhoneDeliveryEligibility.ts +9 -0
- package/src/phone/PhonePersistence.ts +43 -0
- package/src/phone/PhoneRequestContext.ts +7 -0
- package/src/phone/PhoneSignInTargets.ts +19 -0
- package/src/phone/definition.ts +87 -0
- package/src/phone/failure.ts +40 -0
- package/src/phone/lifecycle.ts +662 -0
- package/src/phone/lifecycleModels.ts +108 -0
- package/src/phone/models.ts +41 -0
- package/src/phone/module.ts +433 -0
- package/src/proofs/EmailProofDelivery.ts +19 -0
- package/src/proofs/HostIngressLimiter.ts +20 -0
- package/src/proofs/ProofPersistence.ts +172 -0
- package/src/proofs/SmsProofDelivery.ts +19 -0
- package/src/proofs/abuse.ts +23 -0
- package/src/proofs/completion.ts +23 -0
- package/src/proofs/crypto.ts +326 -0
- package/src/proofs/definition.ts +39 -0
- package/src/proofs/delivery.ts +73 -0
- package/src/proofs/dispatch.ts +99 -0
- package/src/proofs/errors.ts +46 -0
- package/src/proofs/models.ts +131 -0
- package/src/proofs/module.ts +620 -0
- package/src/proofs/policy.ts +77 -0
- package/src/sessions/AuthenticationAuthority.ts +51 -0
- package/src/sessions/PendingAuthentication.ts +121 -0
- package/src/sessions/SessionStepUpPersistence.ts +164 -0
- package/src/sessions/assurance.ts +192 -0
- package/src/sessions/commit.ts +13 -0
- package/src/sessions/configuration.ts +133 -0
- package/src/sessions/contract.ts +203 -0
- package/src/sessions/crypto.ts +181 -0
- package/src/sessions/definition.ts +25 -0
- package/src/sessions/errors.ts +68 -0
- package/src/sessions/invalidation.ts +46 -0
- package/src/sessions/models.ts +138 -0
- package/src/sessions/module.ts +1991 -0
- package/src/sessions/persistence.ts +135 -0
- package/src/sessions/policy.ts +103 -0
- package/src/testing/conformance/AuthStore.ts +314 -0
- package/src/testing/conformance/OAuthConnectionStore.ts +167 -0
- package/src/testing/conformance/OAuthStateStore.ts +105 -0
- package/src/testing/conformance/PasswordCredentialStore.ts +205 -0
- package/src/testing/conformance/support.ts +38 -0
- package/src/testing/crypto.ts +55 -0
- package/src/testing/keyring.ts +17 -0
- package/src/totp/TotpActionEvidence.ts +18 -0
- package/src/totp/TotpPersistence.ts +26 -0
- package/src/totp/TotpSecretKeys.ts +15 -0
- package/src/totp/crypto.ts +160 -0
- package/src/totp/definition.ts +78 -0
- package/src/totp/errors.ts +25 -0
- package/src/totp/models.ts +164 -0
- package/src/totp/module.ts +717 -0
|
@@ -0,0 +1,1245 @@
|
|
|
1
|
+
import { Schema } from "effect";
|
|
2
|
+
//#region src/passkey/models.d.ts
|
|
3
|
+
declare const PasskeyLabel: Schema.NonEmptyString;
|
|
4
|
+
declare const PasskeyModuleId: Schema.String;
|
|
5
|
+
declare const PasskeyCommandId: Schema.String;
|
|
6
|
+
declare const PasskeyProfileId: Schema.String;
|
|
7
|
+
declare const PasskeyInstant: Schema.Int;
|
|
8
|
+
declare const PasskeyGeneration: Schema.Int;
|
|
9
|
+
declare const PasskeyCounter: Schema.Int;
|
|
10
|
+
declare const PasskeyProtocolCredentialId: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
11
|
+
type PasskeyProtocolCredentialId = typeof PasskeyProtocolCredentialId.Type;
|
|
12
|
+
declare const PasskeyUserHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
13
|
+
type PasskeyUserHandle = typeof PasskeyUserHandle.Type;
|
|
14
|
+
declare const PasskeyChallenge: Schema.String;
|
|
15
|
+
declare const PasskeyPublicKey: Schema.String;
|
|
16
|
+
declare const PasskeyCredentialId: Schema.NonEmptyString;
|
|
17
|
+
declare const PasskeyRpId: Schema.String;
|
|
18
|
+
declare const PasskeyProfile: Schema.Struct<{
|
|
19
|
+
readonly profileId: Schema.String;
|
|
20
|
+
readonly generation: Schema.Int;
|
|
21
|
+
readonly rpId: Schema.String;
|
|
22
|
+
readonly rpName: Schema.NonEmptyString;
|
|
23
|
+
readonly origins: Schema.NonEmptyArray<Schema.NonEmptyString>;
|
|
24
|
+
readonly developmentLocalhost: Schema.Boolean;
|
|
25
|
+
readonly residentKey: Schema.Literals<readonly ["required", "preferred", "discouraged"]>;
|
|
26
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
27
|
+
readonly primarySignIn: Schema.Boolean;
|
|
28
|
+
readonly attestation: Schema.Literal<"none">;
|
|
29
|
+
readonly algorithms: Schema.NonEmptyArray<Schema.Literals<readonly [-7, -257]>>;
|
|
30
|
+
}>;
|
|
31
|
+
type PasskeyProfile = typeof PasskeyProfile.Type;
|
|
32
|
+
declare const PasskeyDescriptor: Schema.Struct<{
|
|
33
|
+
readonly type: Schema.Literal<"public-key">;
|
|
34
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
35
|
+
}>;
|
|
36
|
+
declare const PasskeyAuthenticationOptions: Schema.Struct<{
|
|
37
|
+
readonly challenge: Schema.String;
|
|
38
|
+
readonly rpId: Schema.String;
|
|
39
|
+
readonly timeout: Schema.Int;
|
|
40
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
41
|
+
readonly allowCredentials: Schema.$Array<Schema.Struct<{
|
|
42
|
+
readonly type: Schema.Literal<"public-key">;
|
|
43
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
44
|
+
}>>;
|
|
45
|
+
}>;
|
|
46
|
+
type PasskeyAuthenticationOptions = typeof PasskeyAuthenticationOptions.Type;
|
|
47
|
+
declare const PasskeyRegistrationOptions: Schema.Struct<{
|
|
48
|
+
readonly challenge: Schema.String;
|
|
49
|
+
readonly rp: Schema.Struct<{
|
|
50
|
+
readonly id: Schema.String;
|
|
51
|
+
readonly name: Schema.NonEmptyString;
|
|
52
|
+
}>;
|
|
53
|
+
readonly user: Schema.Struct<{
|
|
54
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
55
|
+
readonly name: Schema.NonEmptyString;
|
|
56
|
+
readonly displayName: Schema.NonEmptyString;
|
|
57
|
+
}>;
|
|
58
|
+
readonly pubKeyCredParams: Schema.NonEmptyArray<Schema.Struct<{
|
|
59
|
+
readonly type: Schema.Literal<"public-key">;
|
|
60
|
+
readonly alg: Schema.Literals<readonly [-7, -257]>;
|
|
61
|
+
}>>;
|
|
62
|
+
readonly timeout: Schema.Int;
|
|
63
|
+
readonly attestation: Schema.Literal<"none">;
|
|
64
|
+
readonly authenticatorSelection: Schema.Struct<{
|
|
65
|
+
readonly residentKey: Schema.Literals<readonly ["required", "preferred", "discouraged"]>;
|
|
66
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
67
|
+
}>;
|
|
68
|
+
readonly excludeCredentials: Schema.$Array<Schema.Struct<{
|
|
69
|
+
readonly type: Schema.Literal<"public-key">;
|
|
70
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
71
|
+
}>>;
|
|
72
|
+
}>;
|
|
73
|
+
type PasskeyRegistrationOptions = typeof PasskeyRegistrationOptions.Type;
|
|
74
|
+
declare const PasskeyRevision: Schema.Struct<{
|
|
75
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
76
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
77
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
78
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
79
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
80
|
+
}>>;
|
|
81
|
+
}>;
|
|
82
|
+
declare const PasskeyRequirement: Schema.Struct<{
|
|
83
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
84
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
85
|
+
readonly userVerified: Schema.Boolean;
|
|
86
|
+
readonly phishingResistant: Schema.Boolean;
|
|
87
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
88
|
+
readonly minimumCredentials: Schema.Int;
|
|
89
|
+
}>>;
|
|
90
|
+
}>;
|
|
91
|
+
declare const PasskeyEvidence: Schema.Struct<{
|
|
92
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
93
|
+
readonly revision: Schema.Struct<{
|
|
94
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
95
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
96
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
97
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
98
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
99
|
+
}>>;
|
|
100
|
+
}>;
|
|
101
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
102
|
+
readonly proofs: Schema.NonEmptyArray<Schema.Struct<{
|
|
103
|
+
readonly userVerified: Schema.Boolean;
|
|
104
|
+
readonly phishingResistant: Schema.Boolean;
|
|
105
|
+
readonly verifiedAt: Schema.DateTimeUtcFromMillis;
|
|
106
|
+
readonly method: Schema.NonEmptyString;
|
|
107
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
108
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
109
|
+
}>>;
|
|
110
|
+
}>;
|
|
111
|
+
declare const PasskeyCredential: Schema.Struct<{
|
|
112
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
113
|
+
readonly rpId: Schema.String;
|
|
114
|
+
readonly protocolCredentialId: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
115
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
116
|
+
readonly publicKey: Schema.String;
|
|
117
|
+
readonly algorithm: Schema.Literals<readonly [-7, -257]>;
|
|
118
|
+
readonly profile: Schema.Struct<{
|
|
119
|
+
readonly profileId: Schema.String;
|
|
120
|
+
readonly generation: Schema.Int;
|
|
121
|
+
readonly rpId: Schema.String;
|
|
122
|
+
readonly rpName: Schema.NonEmptyString;
|
|
123
|
+
readonly origins: Schema.NonEmptyArray<Schema.NonEmptyString>;
|
|
124
|
+
readonly developmentLocalhost: Schema.Boolean;
|
|
125
|
+
readonly residentKey: Schema.Literals<readonly ["required", "preferred", "discouraged"]>;
|
|
126
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
127
|
+
readonly primarySignIn: Schema.Boolean;
|
|
128
|
+
readonly attestation: Schema.Literal<"none">;
|
|
129
|
+
readonly algorithms: Schema.NonEmptyArray<Schema.Literals<readonly [-7, -257]>>;
|
|
130
|
+
}>;
|
|
131
|
+
readonly revision: Schema.Struct<{
|
|
132
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
133
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
134
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
135
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
136
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
137
|
+
}>>;
|
|
138
|
+
}>;
|
|
139
|
+
readonly active: Schema.Boolean;
|
|
140
|
+
readonly primarySignIn: Schema.Boolean;
|
|
141
|
+
readonly enrollmentUserVerified: Schema.Boolean;
|
|
142
|
+
readonly backupEligible: Schema.Boolean;
|
|
143
|
+
readonly backupState: Schema.Boolean;
|
|
144
|
+
readonly counter: Schema.Int;
|
|
145
|
+
readonly maximumCounter: Schema.Int;
|
|
146
|
+
}>;
|
|
147
|
+
type PasskeyCredential = typeof PasskeyCredential.Type;
|
|
148
|
+
declare const PasskeyCredentialSummary: Schema.Struct<{
|
|
149
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
150
|
+
readonly name: Schema.NonEmptyString;
|
|
151
|
+
readonly primarySignIn: Schema.Boolean;
|
|
152
|
+
readonly createdAtMillis: Schema.Int;
|
|
153
|
+
readonly lastUsedAtMillis: Schema.optionalKey<Schema.Int>;
|
|
154
|
+
}>;
|
|
155
|
+
type PasskeyCredentialSummary = typeof PasskeyCredentialSummary.Type;
|
|
156
|
+
declare const PasskeyTarget: Schema.Struct<{
|
|
157
|
+
readonly moduleId: Schema.String;
|
|
158
|
+
readonly kind: Schema.NonEmptyString;
|
|
159
|
+
readonly commandId: Schema.String;
|
|
160
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
161
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
162
|
+
readonly revision: Schema.Struct<{
|
|
163
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
164
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
165
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
166
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
167
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
168
|
+
}>>;
|
|
169
|
+
}>;
|
|
170
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
171
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
172
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
173
|
+
readonly userVerified: Schema.Boolean;
|
|
174
|
+
readonly phishingResistant: Schema.Boolean;
|
|
175
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
176
|
+
readonly minimumCredentials: Schema.Int;
|
|
177
|
+
}>>;
|
|
178
|
+
}>>;
|
|
179
|
+
readonly expiresAtMillis: Schema.Int;
|
|
180
|
+
}>;
|
|
181
|
+
type PasskeyTarget = typeof PasskeyTarget.Type;
|
|
182
|
+
declare const PasskeyEnrollmentSnapshot: Schema.Struct<{
|
|
183
|
+
readonly revision: Schema.Struct<{
|
|
184
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
185
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
186
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
187
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
188
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
189
|
+
}>>;
|
|
190
|
+
}>;
|
|
191
|
+
readonly userHandle: Schema.optionalKey<Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">>;
|
|
192
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
193
|
+
readonly type: Schema.Literal<"public-key">;
|
|
194
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
195
|
+
}>>;
|
|
196
|
+
}>;
|
|
197
|
+
type PasskeyEnrollmentSnapshot = typeof PasskeyEnrollmentSnapshot.Type;
|
|
198
|
+
declare const PasskeyActionChallenge: Schema.Struct<{
|
|
199
|
+
readonly moduleId: Schema.String;
|
|
200
|
+
readonly action: Schema.Literals<readonly ["enroll-begin", "enroll-complete", "remove"]>;
|
|
201
|
+
readonly commandId: Schema.String;
|
|
202
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
203
|
+
readonly revision: Schema.Struct<{
|
|
204
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
205
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
206
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
207
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
208
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
209
|
+
}>>;
|
|
210
|
+
}>;
|
|
211
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
212
|
+
}>;
|
|
213
|
+
type PasskeyActionChallenge = typeof PasskeyActionChallenge.Type;
|
|
214
|
+
declare const PasskeyActionAuthorization: Schema.Struct<{
|
|
215
|
+
readonly challenge: Schema.Struct<{
|
|
216
|
+
readonly moduleId: Schema.String;
|
|
217
|
+
readonly action: Schema.Literals<readonly ["enroll-begin", "enroll-complete", "remove"]>;
|
|
218
|
+
readonly commandId: Schema.String;
|
|
219
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
220
|
+
readonly revision: Schema.Struct<{
|
|
221
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
222
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
223
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
224
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
225
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
226
|
+
}>>;
|
|
227
|
+
}>;
|
|
228
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
229
|
+
}>;
|
|
230
|
+
readonly evidence: Schema.Struct<{
|
|
231
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
232
|
+
readonly revision: Schema.Struct<{
|
|
233
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
234
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
235
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
236
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
237
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
238
|
+
}>>;
|
|
239
|
+
}>;
|
|
240
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
241
|
+
readonly proofs: Schema.NonEmptyArray<Schema.Struct<{
|
|
242
|
+
readonly userVerified: Schema.Boolean;
|
|
243
|
+
readonly phishingResistant: Schema.Boolean;
|
|
244
|
+
readonly verifiedAt: Schema.DateTimeUtcFromMillis;
|
|
245
|
+
readonly method: Schema.NonEmptyString;
|
|
246
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
247
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
248
|
+
}>>;
|
|
249
|
+
}>;
|
|
250
|
+
readonly requirement: Schema.Struct<{
|
|
251
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
252
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
253
|
+
readonly userVerified: Schema.Boolean;
|
|
254
|
+
readonly phishingResistant: Schema.Boolean;
|
|
255
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
256
|
+
readonly minimumCredentials: Schema.Int;
|
|
257
|
+
}>>;
|
|
258
|
+
}>;
|
|
259
|
+
}>;
|
|
260
|
+
type PasskeyActionAuthorization = typeof PasskeyActionAuthorization.Type;
|
|
261
|
+
declare const PasskeyContext: Schema.Union<readonly [Schema.TaggedStruct<"SignIn", {}>, Schema.TaggedStruct<"Registration", {
|
|
262
|
+
readonly fingerprint: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
263
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
264
|
+
readonly name: Schema.NonEmptyString;
|
|
265
|
+
readonly displayName: Schema.NonEmptyString;
|
|
266
|
+
}>, Schema.TaggedStruct<"Enrollment", {
|
|
267
|
+
readonly revision: Schema.Struct<{
|
|
268
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
269
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
270
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
271
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
272
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
273
|
+
}>>;
|
|
274
|
+
}>;
|
|
275
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
276
|
+
readonly name: Schema.NonEmptyString;
|
|
277
|
+
readonly authorization: Schema.Struct<{
|
|
278
|
+
readonly challenge: Schema.Struct<{
|
|
279
|
+
readonly moduleId: Schema.String;
|
|
280
|
+
readonly action: Schema.Literals<readonly ["enroll-begin", "enroll-complete", "remove"]>;
|
|
281
|
+
readonly commandId: Schema.String;
|
|
282
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
283
|
+
readonly revision: Schema.Struct<{
|
|
284
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
285
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
286
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
287
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
288
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
289
|
+
}>>;
|
|
290
|
+
}>;
|
|
291
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
292
|
+
}>;
|
|
293
|
+
readonly evidence: Schema.Struct<{
|
|
294
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
295
|
+
readonly revision: Schema.Struct<{
|
|
296
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
297
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
298
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
299
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
300
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
301
|
+
}>>;
|
|
302
|
+
}>;
|
|
303
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
304
|
+
readonly proofs: Schema.NonEmptyArray<Schema.Struct<{
|
|
305
|
+
readonly userVerified: Schema.Boolean;
|
|
306
|
+
readonly phishingResistant: Schema.Boolean;
|
|
307
|
+
readonly verifiedAt: Schema.DateTimeUtcFromMillis;
|
|
308
|
+
readonly method: Schema.NonEmptyString;
|
|
309
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
310
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
311
|
+
}>>;
|
|
312
|
+
}>;
|
|
313
|
+
readonly requirement: Schema.Struct<{
|
|
314
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
315
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
316
|
+
readonly userVerified: Schema.Boolean;
|
|
317
|
+
readonly phishingResistant: Schema.Boolean;
|
|
318
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
319
|
+
readonly minimumCredentials: Schema.Int;
|
|
320
|
+
}>>;
|
|
321
|
+
}>;
|
|
322
|
+
}>;
|
|
323
|
+
}>, Schema.TaggedStruct<"Pending", {
|
|
324
|
+
readonly target: Schema.Struct<{
|
|
325
|
+
readonly moduleId: Schema.String;
|
|
326
|
+
readonly kind: Schema.NonEmptyString;
|
|
327
|
+
readonly commandId: Schema.String;
|
|
328
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
329
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
330
|
+
readonly revision: Schema.Struct<{
|
|
331
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
332
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
333
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
334
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
335
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
336
|
+
}>>;
|
|
337
|
+
}>;
|
|
338
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
339
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
340
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
341
|
+
readonly userVerified: Schema.Boolean;
|
|
342
|
+
readonly phishingResistant: Schema.Boolean;
|
|
343
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
344
|
+
readonly minimumCredentials: Schema.Int;
|
|
345
|
+
}>>;
|
|
346
|
+
}>>;
|
|
347
|
+
readonly expiresAtMillis: Schema.Int;
|
|
348
|
+
}>;
|
|
349
|
+
}>, Schema.TaggedStruct<"StepUp", {
|
|
350
|
+
readonly target: Schema.Struct<{
|
|
351
|
+
readonly moduleId: Schema.String;
|
|
352
|
+
readonly kind: Schema.NonEmptyString;
|
|
353
|
+
readonly commandId: Schema.String;
|
|
354
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
355
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
356
|
+
readonly revision: Schema.Struct<{
|
|
357
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
358
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
359
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
360
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
361
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
362
|
+
}>>;
|
|
363
|
+
}>;
|
|
364
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
365
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
366
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
367
|
+
readonly userVerified: Schema.Boolean;
|
|
368
|
+
readonly phishingResistant: Schema.Boolean;
|
|
369
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
370
|
+
readonly minimumCredentials: Schema.Int;
|
|
371
|
+
}>>;
|
|
372
|
+
}>>;
|
|
373
|
+
readonly expiresAtMillis: Schema.Int;
|
|
374
|
+
}>;
|
|
375
|
+
}>, Schema.TaggedStruct<"Action", {
|
|
376
|
+
readonly target: Schema.Struct<{
|
|
377
|
+
readonly moduleId: Schema.String;
|
|
378
|
+
readonly kind: Schema.NonEmptyString;
|
|
379
|
+
readonly commandId: Schema.String;
|
|
380
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
381
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
382
|
+
readonly revision: Schema.Struct<{
|
|
383
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
384
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
385
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
386
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
387
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
388
|
+
}>>;
|
|
389
|
+
}>;
|
|
390
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
391
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
392
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
393
|
+
readonly userVerified: Schema.Boolean;
|
|
394
|
+
readonly phishingResistant: Schema.Boolean;
|
|
395
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
396
|
+
readonly minimumCredentials: Schema.Int;
|
|
397
|
+
}>>;
|
|
398
|
+
}>>;
|
|
399
|
+
readonly expiresAtMillis: Schema.Int;
|
|
400
|
+
}>;
|
|
401
|
+
}>]>;
|
|
402
|
+
type PasskeyContext = typeof PasskeyContext.Type;
|
|
403
|
+
declare const PasskeyPurpose: Schema.Literals<readonly ["sign-in", "registration", "enrollment", "pending", "step-up", "action"]>;
|
|
404
|
+
type PasskeyPurpose = typeof PasskeyPurpose.Type;
|
|
405
|
+
declare const PasskeyCeremony: Schema.Struct<{
|
|
406
|
+
readonly moduleId: Schema.String;
|
|
407
|
+
readonly generation: Schema.Int;
|
|
408
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
409
|
+
readonly commandId: Schema.String;
|
|
410
|
+
readonly purpose: Schema.Literals<readonly ["sign-in", "registration", "enrollment", "pending", "step-up", "action"]>;
|
|
411
|
+
readonly profile: Schema.Struct<{
|
|
412
|
+
readonly profileId: Schema.String;
|
|
413
|
+
readonly generation: Schema.Int;
|
|
414
|
+
readonly rpId: Schema.String;
|
|
415
|
+
readonly rpName: Schema.NonEmptyString;
|
|
416
|
+
readonly origins: Schema.NonEmptyArray<Schema.NonEmptyString>;
|
|
417
|
+
readonly developmentLocalhost: Schema.Boolean;
|
|
418
|
+
readonly residentKey: Schema.Literals<readonly ["required", "preferred", "discouraged"]>;
|
|
419
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
420
|
+
readonly primarySignIn: Schema.Boolean;
|
|
421
|
+
readonly attestation: Schema.Literal<"none">;
|
|
422
|
+
readonly algorithms: Schema.NonEmptyArray<Schema.Literals<readonly [-7, -257]>>;
|
|
423
|
+
}>;
|
|
424
|
+
readonly challenge: Schema.String;
|
|
425
|
+
readonly requestBindingVerifier: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
426
|
+
readonly requestBindingExpiresAtMillis: Schema.Int;
|
|
427
|
+
readonly issuedAtMillis: Schema.Int;
|
|
428
|
+
readonly expiresAtMillis: Schema.Int;
|
|
429
|
+
readonly retentionUntilMillis: Schema.Int;
|
|
430
|
+
readonly claimLifetimeMillis: Schema.Int;
|
|
431
|
+
readonly allowedCredentials: Schema.$Array<Schema.Struct<{
|
|
432
|
+
readonly type: Schema.Literal<"public-key">;
|
|
433
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
434
|
+
}>>;
|
|
435
|
+
readonly context: Schema.Union<readonly [Schema.TaggedStruct<"SignIn", {}>, Schema.TaggedStruct<"Registration", {
|
|
436
|
+
readonly fingerprint: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
437
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
438
|
+
readonly name: Schema.NonEmptyString;
|
|
439
|
+
readonly displayName: Schema.NonEmptyString;
|
|
440
|
+
}>, Schema.TaggedStruct<"Enrollment", {
|
|
441
|
+
readonly revision: Schema.Struct<{
|
|
442
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
443
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
444
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
445
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
446
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
447
|
+
}>>;
|
|
448
|
+
}>;
|
|
449
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
450
|
+
readonly name: Schema.NonEmptyString;
|
|
451
|
+
readonly authorization: Schema.Struct<{
|
|
452
|
+
readonly challenge: Schema.Struct<{
|
|
453
|
+
readonly moduleId: Schema.String;
|
|
454
|
+
readonly action: Schema.Literals<readonly ["enroll-begin", "enroll-complete", "remove"]>;
|
|
455
|
+
readonly commandId: Schema.String;
|
|
456
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
457
|
+
readonly revision: Schema.Struct<{
|
|
458
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
459
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
460
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
461
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
462
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
463
|
+
}>>;
|
|
464
|
+
}>;
|
|
465
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
466
|
+
}>;
|
|
467
|
+
readonly evidence: Schema.Struct<{
|
|
468
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
469
|
+
readonly revision: Schema.Struct<{
|
|
470
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
471
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
472
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
473
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
474
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
475
|
+
}>>;
|
|
476
|
+
}>;
|
|
477
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
478
|
+
readonly proofs: Schema.NonEmptyArray<Schema.Struct<{
|
|
479
|
+
readonly userVerified: Schema.Boolean;
|
|
480
|
+
readonly phishingResistant: Schema.Boolean;
|
|
481
|
+
readonly verifiedAt: Schema.DateTimeUtcFromMillis;
|
|
482
|
+
readonly method: Schema.NonEmptyString;
|
|
483
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
484
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
485
|
+
}>>;
|
|
486
|
+
}>;
|
|
487
|
+
readonly requirement: Schema.Struct<{
|
|
488
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
489
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
490
|
+
readonly userVerified: Schema.Boolean;
|
|
491
|
+
readonly phishingResistant: Schema.Boolean;
|
|
492
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
493
|
+
readonly minimumCredentials: Schema.Int;
|
|
494
|
+
}>>;
|
|
495
|
+
}>;
|
|
496
|
+
}>;
|
|
497
|
+
}>, Schema.TaggedStruct<"Pending", {
|
|
498
|
+
readonly target: Schema.Struct<{
|
|
499
|
+
readonly moduleId: Schema.String;
|
|
500
|
+
readonly kind: Schema.NonEmptyString;
|
|
501
|
+
readonly commandId: Schema.String;
|
|
502
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
503
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
504
|
+
readonly revision: Schema.Struct<{
|
|
505
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
506
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
507
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
508
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
509
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
510
|
+
}>>;
|
|
511
|
+
}>;
|
|
512
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
513
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
514
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
515
|
+
readonly userVerified: Schema.Boolean;
|
|
516
|
+
readonly phishingResistant: Schema.Boolean;
|
|
517
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
518
|
+
readonly minimumCredentials: Schema.Int;
|
|
519
|
+
}>>;
|
|
520
|
+
}>>;
|
|
521
|
+
readonly expiresAtMillis: Schema.Int;
|
|
522
|
+
}>;
|
|
523
|
+
}>, Schema.TaggedStruct<"StepUp", {
|
|
524
|
+
readonly target: Schema.Struct<{
|
|
525
|
+
readonly moduleId: Schema.String;
|
|
526
|
+
readonly kind: Schema.NonEmptyString;
|
|
527
|
+
readonly commandId: Schema.String;
|
|
528
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
529
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
530
|
+
readonly revision: Schema.Struct<{
|
|
531
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
532
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
533
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
534
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
535
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
536
|
+
}>>;
|
|
537
|
+
}>;
|
|
538
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
539
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
540
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
541
|
+
readonly userVerified: Schema.Boolean;
|
|
542
|
+
readonly phishingResistant: Schema.Boolean;
|
|
543
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
544
|
+
readonly minimumCredentials: Schema.Int;
|
|
545
|
+
}>>;
|
|
546
|
+
}>>;
|
|
547
|
+
readonly expiresAtMillis: Schema.Int;
|
|
548
|
+
}>;
|
|
549
|
+
}>, Schema.TaggedStruct<"Action", {
|
|
550
|
+
readonly target: Schema.Struct<{
|
|
551
|
+
readonly moduleId: Schema.String;
|
|
552
|
+
readonly kind: Schema.NonEmptyString;
|
|
553
|
+
readonly commandId: Schema.String;
|
|
554
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
555
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
556
|
+
readonly revision: Schema.Struct<{
|
|
557
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
558
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
559
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
560
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
561
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
562
|
+
}>>;
|
|
563
|
+
}>;
|
|
564
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
565
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
566
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
567
|
+
readonly userVerified: Schema.Boolean;
|
|
568
|
+
readonly phishingResistant: Schema.Boolean;
|
|
569
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
570
|
+
readonly minimumCredentials: Schema.Int;
|
|
571
|
+
}>>;
|
|
572
|
+
}>>;
|
|
573
|
+
readonly expiresAtMillis: Schema.Int;
|
|
574
|
+
}>;
|
|
575
|
+
}>]>;
|
|
576
|
+
}>;
|
|
577
|
+
type PasskeyCeremony = typeof PasskeyCeremony.Type;
|
|
578
|
+
declare const PasskeyAccess: Schema.Struct<{
|
|
579
|
+
readonly moduleId: Schema.String;
|
|
580
|
+
readonly generation: Schema.Int;
|
|
581
|
+
readonly purpose: Schema.Literals<readonly ["sign-in", "registration", "enrollment", "pending", "step-up", "action"]>;
|
|
582
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
583
|
+
readonly requestBindingVerifier: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
584
|
+
readonly requestBindingExpiresAtMillis: Schema.Int;
|
|
585
|
+
readonly nowMillis: Schema.Int;
|
|
586
|
+
}>;
|
|
587
|
+
type PasskeyAccess = typeof PasskeyAccess.Type;
|
|
588
|
+
declare const PasskeyClaim: Schema.Struct<{
|
|
589
|
+
readonly ceremony: Schema.Struct<{
|
|
590
|
+
readonly moduleId: Schema.String;
|
|
591
|
+
readonly generation: Schema.Int;
|
|
592
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
593
|
+
readonly commandId: Schema.String;
|
|
594
|
+
readonly purpose: Schema.Literals<readonly ["sign-in", "registration", "enrollment", "pending", "step-up", "action"]>;
|
|
595
|
+
readonly profile: Schema.Struct<{
|
|
596
|
+
readonly profileId: Schema.String;
|
|
597
|
+
readonly generation: Schema.Int;
|
|
598
|
+
readonly rpId: Schema.String;
|
|
599
|
+
readonly rpName: Schema.NonEmptyString;
|
|
600
|
+
readonly origins: Schema.NonEmptyArray<Schema.NonEmptyString>;
|
|
601
|
+
readonly developmentLocalhost: Schema.Boolean;
|
|
602
|
+
readonly residentKey: Schema.Literals<readonly ["required", "preferred", "discouraged"]>;
|
|
603
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
604
|
+
readonly primarySignIn: Schema.Boolean;
|
|
605
|
+
readonly attestation: Schema.Literal<"none">;
|
|
606
|
+
readonly algorithms: Schema.NonEmptyArray<Schema.Literals<readonly [-7, -257]>>;
|
|
607
|
+
}>;
|
|
608
|
+
readonly challenge: Schema.String;
|
|
609
|
+
readonly requestBindingVerifier: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
610
|
+
readonly requestBindingExpiresAtMillis: Schema.Int;
|
|
611
|
+
readonly issuedAtMillis: Schema.Int;
|
|
612
|
+
readonly expiresAtMillis: Schema.Int;
|
|
613
|
+
readonly retentionUntilMillis: Schema.Int;
|
|
614
|
+
readonly claimLifetimeMillis: Schema.Int;
|
|
615
|
+
readonly allowedCredentials: Schema.$Array<Schema.Struct<{
|
|
616
|
+
readonly type: Schema.Literal<"public-key">;
|
|
617
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
618
|
+
}>>;
|
|
619
|
+
readonly context: Schema.Union<readonly [Schema.TaggedStruct<"SignIn", {}>, Schema.TaggedStruct<"Registration", {
|
|
620
|
+
readonly fingerprint: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
621
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
622
|
+
readonly name: Schema.NonEmptyString;
|
|
623
|
+
readonly displayName: Schema.NonEmptyString;
|
|
624
|
+
}>, Schema.TaggedStruct<"Enrollment", {
|
|
625
|
+
readonly revision: Schema.Struct<{
|
|
626
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
627
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
628
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
629
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
630
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
631
|
+
}>>;
|
|
632
|
+
}>;
|
|
633
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
634
|
+
readonly name: Schema.NonEmptyString;
|
|
635
|
+
readonly authorization: Schema.Struct<{
|
|
636
|
+
readonly challenge: Schema.Struct<{
|
|
637
|
+
readonly moduleId: Schema.String;
|
|
638
|
+
readonly action: Schema.Literals<readonly ["enroll-begin", "enroll-complete", "remove"]>;
|
|
639
|
+
readonly commandId: Schema.String;
|
|
640
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
641
|
+
readonly revision: Schema.Struct<{
|
|
642
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
643
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
644
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
645
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
646
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
647
|
+
}>>;
|
|
648
|
+
}>;
|
|
649
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
650
|
+
}>;
|
|
651
|
+
readonly evidence: Schema.Struct<{
|
|
652
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
653
|
+
readonly revision: Schema.Struct<{
|
|
654
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
655
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
656
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
657
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
658
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
659
|
+
}>>;
|
|
660
|
+
}>;
|
|
661
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
662
|
+
readonly proofs: Schema.NonEmptyArray<Schema.Struct<{
|
|
663
|
+
readonly userVerified: Schema.Boolean;
|
|
664
|
+
readonly phishingResistant: Schema.Boolean;
|
|
665
|
+
readonly verifiedAt: Schema.DateTimeUtcFromMillis;
|
|
666
|
+
readonly method: Schema.NonEmptyString;
|
|
667
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
668
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
669
|
+
}>>;
|
|
670
|
+
}>;
|
|
671
|
+
readonly requirement: Schema.Struct<{
|
|
672
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
673
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
674
|
+
readonly userVerified: Schema.Boolean;
|
|
675
|
+
readonly phishingResistant: Schema.Boolean;
|
|
676
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
677
|
+
readonly minimumCredentials: Schema.Int;
|
|
678
|
+
}>>;
|
|
679
|
+
}>;
|
|
680
|
+
}>;
|
|
681
|
+
}>, Schema.TaggedStruct<"Pending", {
|
|
682
|
+
readonly target: Schema.Struct<{
|
|
683
|
+
readonly moduleId: Schema.String;
|
|
684
|
+
readonly kind: Schema.NonEmptyString;
|
|
685
|
+
readonly commandId: Schema.String;
|
|
686
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
687
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
688
|
+
readonly revision: Schema.Struct<{
|
|
689
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
690
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
691
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
692
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
693
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
694
|
+
}>>;
|
|
695
|
+
}>;
|
|
696
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
697
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
698
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
699
|
+
readonly userVerified: Schema.Boolean;
|
|
700
|
+
readonly phishingResistant: Schema.Boolean;
|
|
701
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
702
|
+
readonly minimumCredentials: Schema.Int;
|
|
703
|
+
}>>;
|
|
704
|
+
}>>;
|
|
705
|
+
readonly expiresAtMillis: Schema.Int;
|
|
706
|
+
}>;
|
|
707
|
+
}>, Schema.TaggedStruct<"StepUp", {
|
|
708
|
+
readonly target: Schema.Struct<{
|
|
709
|
+
readonly moduleId: Schema.String;
|
|
710
|
+
readonly kind: Schema.NonEmptyString;
|
|
711
|
+
readonly commandId: Schema.String;
|
|
712
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
713
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
714
|
+
readonly revision: Schema.Struct<{
|
|
715
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
716
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
717
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
718
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
719
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
720
|
+
}>>;
|
|
721
|
+
}>;
|
|
722
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
723
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
724
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
725
|
+
readonly userVerified: Schema.Boolean;
|
|
726
|
+
readonly phishingResistant: Schema.Boolean;
|
|
727
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
728
|
+
readonly minimumCredentials: Schema.Int;
|
|
729
|
+
}>>;
|
|
730
|
+
}>>;
|
|
731
|
+
readonly expiresAtMillis: Schema.Int;
|
|
732
|
+
}>;
|
|
733
|
+
}>, Schema.TaggedStruct<"Action", {
|
|
734
|
+
readonly target: Schema.Struct<{
|
|
735
|
+
readonly moduleId: Schema.String;
|
|
736
|
+
readonly kind: Schema.NonEmptyString;
|
|
737
|
+
readonly commandId: Schema.String;
|
|
738
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
739
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
740
|
+
readonly revision: Schema.Struct<{
|
|
741
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
742
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
743
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
744
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
745
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
746
|
+
}>>;
|
|
747
|
+
}>;
|
|
748
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
749
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
750
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
751
|
+
readonly userVerified: Schema.Boolean;
|
|
752
|
+
readonly phishingResistant: Schema.Boolean;
|
|
753
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
754
|
+
readonly minimumCredentials: Schema.Int;
|
|
755
|
+
}>>;
|
|
756
|
+
}>>;
|
|
757
|
+
readonly expiresAtMillis: Schema.Int;
|
|
758
|
+
}>;
|
|
759
|
+
}>]>;
|
|
760
|
+
}>;
|
|
761
|
+
readonly claimId: Schema.String;
|
|
762
|
+
readonly claimedAtMillis: Schema.Int;
|
|
763
|
+
readonly claimExpiresAtMillis: Schema.Int;
|
|
764
|
+
}>;
|
|
765
|
+
type PasskeyClaim = typeof PasskeyClaim.Type;
|
|
766
|
+
declare const PasskeyRegistrationVerified: Schema.Struct<{
|
|
767
|
+
readonly protocolCredentialId: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
768
|
+
readonly publicKey: Schema.String;
|
|
769
|
+
readonly algorithm: Schema.Literals<readonly [-7, -257]>;
|
|
770
|
+
readonly userVerified: Schema.Boolean;
|
|
771
|
+
readonly backupEligible: Schema.Boolean;
|
|
772
|
+
readonly backupState: Schema.Boolean;
|
|
773
|
+
readonly counter: Schema.Int;
|
|
774
|
+
}>;
|
|
775
|
+
type PasskeyRegistrationVerified = typeof PasskeyRegistrationVerified.Type;
|
|
776
|
+
declare const PasskeyAssertionVerified: Schema.Struct<{
|
|
777
|
+
readonly protocolCredentialId: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
778
|
+
readonly userHandle: Schema.optionalKey<Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">>;
|
|
779
|
+
readonly userVerified: Schema.Boolean;
|
|
780
|
+
readonly backupEligible: Schema.Boolean;
|
|
781
|
+
readonly backupState: Schema.Boolean;
|
|
782
|
+
readonly counter: Schema.Int;
|
|
783
|
+
}>;
|
|
784
|
+
type PasskeyAssertionVerified = typeof PasskeyAssertionVerified.Type;
|
|
785
|
+
declare const PasskeyIssueDecision: Schema.Union<readonly [Schema.TaggedStruct<"Issued", {
|
|
786
|
+
readonly ceremony: Schema.Struct<{
|
|
787
|
+
readonly moduleId: Schema.String;
|
|
788
|
+
readonly generation: Schema.Int;
|
|
789
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
790
|
+
readonly commandId: Schema.String;
|
|
791
|
+
readonly purpose: Schema.Literals<readonly ["sign-in", "registration", "enrollment", "pending", "step-up", "action"]>;
|
|
792
|
+
readonly profile: Schema.Struct<{
|
|
793
|
+
readonly profileId: Schema.String;
|
|
794
|
+
readonly generation: Schema.Int;
|
|
795
|
+
readonly rpId: Schema.String;
|
|
796
|
+
readonly rpName: Schema.NonEmptyString;
|
|
797
|
+
readonly origins: Schema.NonEmptyArray<Schema.NonEmptyString>;
|
|
798
|
+
readonly developmentLocalhost: Schema.Boolean;
|
|
799
|
+
readonly residentKey: Schema.Literals<readonly ["required", "preferred", "discouraged"]>;
|
|
800
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
801
|
+
readonly primarySignIn: Schema.Boolean;
|
|
802
|
+
readonly attestation: Schema.Literal<"none">;
|
|
803
|
+
readonly algorithms: Schema.NonEmptyArray<Schema.Literals<readonly [-7, -257]>>;
|
|
804
|
+
}>;
|
|
805
|
+
readonly challenge: Schema.String;
|
|
806
|
+
readonly requestBindingVerifier: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
807
|
+
readonly requestBindingExpiresAtMillis: Schema.Int;
|
|
808
|
+
readonly issuedAtMillis: Schema.Int;
|
|
809
|
+
readonly expiresAtMillis: Schema.Int;
|
|
810
|
+
readonly retentionUntilMillis: Schema.Int;
|
|
811
|
+
readonly claimLifetimeMillis: Schema.Int;
|
|
812
|
+
readonly allowedCredentials: Schema.$Array<Schema.Struct<{
|
|
813
|
+
readonly type: Schema.Literal<"public-key">;
|
|
814
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
815
|
+
}>>;
|
|
816
|
+
readonly context: Schema.Union<readonly [Schema.TaggedStruct<"SignIn", {}>, Schema.TaggedStruct<"Registration", {
|
|
817
|
+
readonly fingerprint: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
818
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
819
|
+
readonly name: Schema.NonEmptyString;
|
|
820
|
+
readonly displayName: Schema.NonEmptyString;
|
|
821
|
+
}>, Schema.TaggedStruct<"Enrollment", {
|
|
822
|
+
readonly revision: Schema.Struct<{
|
|
823
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
824
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
825
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
826
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
827
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
828
|
+
}>>;
|
|
829
|
+
}>;
|
|
830
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
831
|
+
readonly name: Schema.NonEmptyString;
|
|
832
|
+
readonly authorization: Schema.Struct<{
|
|
833
|
+
readonly challenge: Schema.Struct<{
|
|
834
|
+
readonly moduleId: Schema.String;
|
|
835
|
+
readonly action: Schema.Literals<readonly ["enroll-begin", "enroll-complete", "remove"]>;
|
|
836
|
+
readonly commandId: Schema.String;
|
|
837
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
838
|
+
readonly revision: Schema.Struct<{
|
|
839
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
840
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
841
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
842
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
843
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
844
|
+
}>>;
|
|
845
|
+
}>;
|
|
846
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
847
|
+
}>;
|
|
848
|
+
readonly evidence: Schema.Struct<{
|
|
849
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
850
|
+
readonly revision: Schema.Struct<{
|
|
851
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
852
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
853
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
854
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
855
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
856
|
+
}>>;
|
|
857
|
+
}>;
|
|
858
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
859
|
+
readonly proofs: Schema.NonEmptyArray<Schema.Struct<{
|
|
860
|
+
readonly userVerified: Schema.Boolean;
|
|
861
|
+
readonly phishingResistant: Schema.Boolean;
|
|
862
|
+
readonly verifiedAt: Schema.DateTimeUtcFromMillis;
|
|
863
|
+
readonly method: Schema.NonEmptyString;
|
|
864
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
865
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
866
|
+
}>>;
|
|
867
|
+
}>;
|
|
868
|
+
readonly requirement: Schema.Struct<{
|
|
869
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
870
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
871
|
+
readonly userVerified: Schema.Boolean;
|
|
872
|
+
readonly phishingResistant: Schema.Boolean;
|
|
873
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
874
|
+
readonly minimumCredentials: Schema.Int;
|
|
875
|
+
}>>;
|
|
876
|
+
}>;
|
|
877
|
+
}>;
|
|
878
|
+
}>, Schema.TaggedStruct<"Pending", {
|
|
879
|
+
readonly target: Schema.Struct<{
|
|
880
|
+
readonly moduleId: Schema.String;
|
|
881
|
+
readonly kind: Schema.NonEmptyString;
|
|
882
|
+
readonly commandId: Schema.String;
|
|
883
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
884
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
885
|
+
readonly revision: Schema.Struct<{
|
|
886
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
887
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
888
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
889
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
890
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
891
|
+
}>>;
|
|
892
|
+
}>;
|
|
893
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
894
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
895
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
896
|
+
readonly userVerified: Schema.Boolean;
|
|
897
|
+
readonly phishingResistant: Schema.Boolean;
|
|
898
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
899
|
+
readonly minimumCredentials: Schema.Int;
|
|
900
|
+
}>>;
|
|
901
|
+
}>>;
|
|
902
|
+
readonly expiresAtMillis: Schema.Int;
|
|
903
|
+
}>;
|
|
904
|
+
}>, Schema.TaggedStruct<"StepUp", {
|
|
905
|
+
readonly target: Schema.Struct<{
|
|
906
|
+
readonly moduleId: Schema.String;
|
|
907
|
+
readonly kind: Schema.NonEmptyString;
|
|
908
|
+
readonly commandId: Schema.String;
|
|
909
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
910
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
911
|
+
readonly revision: Schema.Struct<{
|
|
912
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
913
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
914
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
915
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
916
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
917
|
+
}>>;
|
|
918
|
+
}>;
|
|
919
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
920
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
921
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
922
|
+
readonly userVerified: Schema.Boolean;
|
|
923
|
+
readonly phishingResistant: Schema.Boolean;
|
|
924
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
925
|
+
readonly minimumCredentials: Schema.Int;
|
|
926
|
+
}>>;
|
|
927
|
+
}>>;
|
|
928
|
+
readonly expiresAtMillis: Schema.Int;
|
|
929
|
+
}>;
|
|
930
|
+
}>, Schema.TaggedStruct<"Action", {
|
|
931
|
+
readonly target: Schema.Struct<{
|
|
932
|
+
readonly moduleId: Schema.String;
|
|
933
|
+
readonly kind: Schema.NonEmptyString;
|
|
934
|
+
readonly commandId: Schema.String;
|
|
935
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
936
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
937
|
+
readonly revision: Schema.Struct<{
|
|
938
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
939
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
940
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
941
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
942
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
943
|
+
}>>;
|
|
944
|
+
}>;
|
|
945
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
946
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
947
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
948
|
+
readonly userVerified: Schema.Boolean;
|
|
949
|
+
readonly phishingResistant: Schema.Boolean;
|
|
950
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
951
|
+
readonly minimumCredentials: Schema.Int;
|
|
952
|
+
}>>;
|
|
953
|
+
}>>;
|
|
954
|
+
readonly expiresAtMillis: Schema.Int;
|
|
955
|
+
}>;
|
|
956
|
+
}>]>;
|
|
957
|
+
}>;
|
|
958
|
+
}>, Schema.TaggedStruct<"Rejected", {}>]>;
|
|
959
|
+
type PasskeyIssueDecision = typeof PasskeyIssueDecision.Type;
|
|
960
|
+
declare const PasskeyClaimDecision: Schema.Union<readonly [Schema.TaggedStruct<"Claimed", {
|
|
961
|
+
readonly claim: Schema.Struct<{
|
|
962
|
+
readonly ceremony: Schema.Struct<{
|
|
963
|
+
readonly moduleId: Schema.String;
|
|
964
|
+
readonly generation: Schema.Int;
|
|
965
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
966
|
+
readonly commandId: Schema.String;
|
|
967
|
+
readonly purpose: Schema.Literals<readonly ["sign-in", "registration", "enrollment", "pending", "step-up", "action"]>;
|
|
968
|
+
readonly profile: Schema.Struct<{
|
|
969
|
+
readonly profileId: Schema.String;
|
|
970
|
+
readonly generation: Schema.Int;
|
|
971
|
+
readonly rpId: Schema.String;
|
|
972
|
+
readonly rpName: Schema.NonEmptyString;
|
|
973
|
+
readonly origins: Schema.NonEmptyArray<Schema.NonEmptyString>;
|
|
974
|
+
readonly developmentLocalhost: Schema.Boolean;
|
|
975
|
+
readonly residentKey: Schema.Literals<readonly ["required", "preferred", "discouraged"]>;
|
|
976
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
977
|
+
readonly primarySignIn: Schema.Boolean;
|
|
978
|
+
readonly attestation: Schema.Literal<"none">;
|
|
979
|
+
readonly algorithms: Schema.NonEmptyArray<Schema.Literals<readonly [-7, -257]>>;
|
|
980
|
+
}>;
|
|
981
|
+
readonly challenge: Schema.String;
|
|
982
|
+
readonly requestBindingVerifier: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
983
|
+
readonly requestBindingExpiresAtMillis: Schema.Int;
|
|
984
|
+
readonly issuedAtMillis: Schema.Int;
|
|
985
|
+
readonly expiresAtMillis: Schema.Int;
|
|
986
|
+
readonly retentionUntilMillis: Schema.Int;
|
|
987
|
+
readonly claimLifetimeMillis: Schema.Int;
|
|
988
|
+
readonly allowedCredentials: Schema.$Array<Schema.Struct<{
|
|
989
|
+
readonly type: Schema.Literal<"public-key">;
|
|
990
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
991
|
+
}>>;
|
|
992
|
+
readonly context: Schema.Union<readonly [Schema.TaggedStruct<"SignIn", {}>, Schema.TaggedStruct<"Registration", {
|
|
993
|
+
readonly fingerprint: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
994
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
995
|
+
readonly name: Schema.NonEmptyString;
|
|
996
|
+
readonly displayName: Schema.NonEmptyString;
|
|
997
|
+
}>, Schema.TaggedStruct<"Enrollment", {
|
|
998
|
+
readonly revision: Schema.Struct<{
|
|
999
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
1000
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1001
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
1002
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1003
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1004
|
+
}>>;
|
|
1005
|
+
}>;
|
|
1006
|
+
readonly userHandle: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
1007
|
+
readonly name: Schema.NonEmptyString;
|
|
1008
|
+
readonly authorization: Schema.Struct<{
|
|
1009
|
+
readonly challenge: Schema.Struct<{
|
|
1010
|
+
readonly moduleId: Schema.String;
|
|
1011
|
+
readonly action: Schema.Literals<readonly ["enroll-begin", "enroll-complete", "remove"]>;
|
|
1012
|
+
readonly commandId: Schema.String;
|
|
1013
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
1014
|
+
readonly revision: Schema.Struct<{
|
|
1015
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
1016
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1017
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
1018
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1019
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1020
|
+
}>>;
|
|
1021
|
+
}>;
|
|
1022
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
1023
|
+
}>;
|
|
1024
|
+
readonly evidence: Schema.Struct<{
|
|
1025
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
1026
|
+
readonly revision: Schema.Struct<{
|
|
1027
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
1028
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1029
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
1030
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1031
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1032
|
+
}>>;
|
|
1033
|
+
}>;
|
|
1034
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
1035
|
+
readonly proofs: Schema.NonEmptyArray<Schema.Struct<{
|
|
1036
|
+
readonly userVerified: Schema.Boolean;
|
|
1037
|
+
readonly phishingResistant: Schema.Boolean;
|
|
1038
|
+
readonly verifiedAt: Schema.DateTimeUtcFromMillis;
|
|
1039
|
+
readonly method: Schema.NonEmptyString;
|
|
1040
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1041
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
1042
|
+
}>>;
|
|
1043
|
+
}>;
|
|
1044
|
+
readonly requirement: Schema.Struct<{
|
|
1045
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
1046
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
1047
|
+
readonly userVerified: Schema.Boolean;
|
|
1048
|
+
readonly phishingResistant: Schema.Boolean;
|
|
1049
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
1050
|
+
readonly minimumCredentials: Schema.Int;
|
|
1051
|
+
}>>;
|
|
1052
|
+
}>;
|
|
1053
|
+
}>;
|
|
1054
|
+
}>, Schema.TaggedStruct<"Pending", {
|
|
1055
|
+
readonly target: Schema.Struct<{
|
|
1056
|
+
readonly moduleId: Schema.String;
|
|
1057
|
+
readonly kind: Schema.NonEmptyString;
|
|
1058
|
+
readonly commandId: Schema.String;
|
|
1059
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
1060
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
1061
|
+
readonly revision: Schema.Struct<{
|
|
1062
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
1063
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1064
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
1065
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1066
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1067
|
+
}>>;
|
|
1068
|
+
}>;
|
|
1069
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
1070
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
1071
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
1072
|
+
readonly userVerified: Schema.Boolean;
|
|
1073
|
+
readonly phishingResistant: Schema.Boolean;
|
|
1074
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
1075
|
+
readonly minimumCredentials: Schema.Int;
|
|
1076
|
+
}>>;
|
|
1077
|
+
}>>;
|
|
1078
|
+
readonly expiresAtMillis: Schema.Int;
|
|
1079
|
+
}>;
|
|
1080
|
+
}>, Schema.TaggedStruct<"StepUp", {
|
|
1081
|
+
readonly target: Schema.Struct<{
|
|
1082
|
+
readonly moduleId: Schema.String;
|
|
1083
|
+
readonly kind: Schema.NonEmptyString;
|
|
1084
|
+
readonly commandId: Schema.String;
|
|
1085
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
1086
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
1087
|
+
readonly revision: Schema.Struct<{
|
|
1088
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
1089
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1090
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
1091
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1092
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1093
|
+
}>>;
|
|
1094
|
+
}>;
|
|
1095
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
1096
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
1097
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
1098
|
+
readonly userVerified: Schema.Boolean;
|
|
1099
|
+
readonly phishingResistant: Schema.Boolean;
|
|
1100
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
1101
|
+
readonly minimumCredentials: Schema.Int;
|
|
1102
|
+
}>>;
|
|
1103
|
+
}>>;
|
|
1104
|
+
readonly expiresAtMillis: Schema.Int;
|
|
1105
|
+
}>;
|
|
1106
|
+
}>, Schema.TaggedStruct<"Action", {
|
|
1107
|
+
readonly target: Schema.Struct<{
|
|
1108
|
+
readonly moduleId: Schema.String;
|
|
1109
|
+
readonly kind: Schema.NonEmptyString;
|
|
1110
|
+
readonly commandId: Schema.String;
|
|
1111
|
+
readonly flowId: Schema.brand<Schema.NonEmptyString, "effect-auth/AuthenticationFlowId">;
|
|
1112
|
+
readonly bindingDigest: Schema.brand<Schema.NonEmptyString, "effect-auth/TokenDigest">;
|
|
1113
|
+
readonly revision: Schema.Struct<{
|
|
1114
|
+
readonly subjectId: Schema.brand<Schema.NonEmptyString, "effect-auth/SubjectId">;
|
|
1115
|
+
readonly securityRevision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1116
|
+
readonly credentials: Schema.$Array<Schema.Struct<{
|
|
1117
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1118
|
+
readonly revision: Schema.brand<Schema.NonEmptyString, "effect-auth/SecurityRevision">;
|
|
1119
|
+
}>>;
|
|
1120
|
+
}>;
|
|
1121
|
+
readonly requirement: Schema.optionalKey<Schema.Struct<{
|
|
1122
|
+
readonly maximumAgeMillis: Schema.Int;
|
|
1123
|
+
readonly alternatives: Schema.NonEmptyArray<Schema.Struct<{
|
|
1124
|
+
readonly userVerified: Schema.Boolean;
|
|
1125
|
+
readonly phishingResistant: Schema.Boolean;
|
|
1126
|
+
readonly factors: Schema.$Array<Schema.Literals<readonly ["knowledge", "possession", "inherence"]>>;
|
|
1127
|
+
readonly minimumCredentials: Schema.Int;
|
|
1128
|
+
}>>;
|
|
1129
|
+
}>>;
|
|
1130
|
+
readonly expiresAtMillis: Schema.Int;
|
|
1131
|
+
}>;
|
|
1132
|
+
}>]>;
|
|
1133
|
+
}>;
|
|
1134
|
+
readonly claimId: Schema.String;
|
|
1135
|
+
readonly claimedAtMillis: Schema.Int;
|
|
1136
|
+
readonly claimExpiresAtMillis: Schema.Int;
|
|
1137
|
+
}>;
|
|
1138
|
+
}>, Schema.TaggedStruct<"Rejected", {}>]>;
|
|
1139
|
+
type PasskeyClaimDecision = typeof PasskeyClaimDecision.Type;
|
|
1140
|
+
declare const PasskeySettlement: Schema.Literals<readonly ["Verified", "Rejected", "Ambiguous"]>;
|
|
1141
|
+
type PasskeySettlement = typeof PasskeySettlement.Type;
|
|
1142
|
+
declare const PasskeyBegin: Schema.Struct<{
|
|
1143
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
1144
|
+
readonly commandId: Schema.String;
|
|
1145
|
+
readonly profileId: Schema.String;
|
|
1146
|
+
}>;
|
|
1147
|
+
type PasskeyBegin = typeof PasskeyBegin.Type;
|
|
1148
|
+
declare const PasskeyAssertion: Schema.RedactedFromValue<Schema.NonEmptyString>;
|
|
1149
|
+
declare const PasskeyAttestation: Schema.RedactedFromValue<Schema.NonEmptyString>;
|
|
1150
|
+
declare const PasskeyComplete: Schema.Struct<{
|
|
1151
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
1152
|
+
readonly bindingCredential: Schema.RedactedFromValue<Schema.String>;
|
|
1153
|
+
readonly response: Schema.RedactedFromValue<Schema.NonEmptyString>;
|
|
1154
|
+
}>;
|
|
1155
|
+
type PasskeyComplete = typeof PasskeyComplete.Type;
|
|
1156
|
+
declare const PasskeyRegistrationComplete: Schema.Struct<{
|
|
1157
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
1158
|
+
readonly bindingCredential: Schema.RedactedFromValue<Schema.String>;
|
|
1159
|
+
readonly response: Schema.RedactedFromValue<Schema.NonEmptyString>;
|
|
1160
|
+
}>;
|
|
1161
|
+
type PasskeyRegistrationComplete = typeof PasskeyRegistrationComplete.Type;
|
|
1162
|
+
declare const PasskeyAuthenticationStarted: Schema.Struct<{
|
|
1163
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
1164
|
+
readonly expiresAtMillis: Schema.Int;
|
|
1165
|
+
readonly options: Schema.Struct<{
|
|
1166
|
+
readonly challenge: Schema.String;
|
|
1167
|
+
readonly rpId: Schema.String;
|
|
1168
|
+
readonly timeout: Schema.Int;
|
|
1169
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
1170
|
+
readonly allowCredentials: Schema.$Array<Schema.Struct<{
|
|
1171
|
+
readonly type: Schema.Literal<"public-key">;
|
|
1172
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
1173
|
+
}>>;
|
|
1174
|
+
}>;
|
|
1175
|
+
}>;
|
|
1176
|
+
type PasskeyAuthenticationStarted = typeof PasskeyAuthenticationStarted.Type;
|
|
1177
|
+
declare const PasskeyRegistrationStarted: Schema.Struct<{
|
|
1178
|
+
readonly flowId: Schema.brand<Schema.String, "effect-auth/RequestBindingFlowId">;
|
|
1179
|
+
readonly expiresAtMillis: Schema.Int;
|
|
1180
|
+
readonly options: Schema.Struct<{
|
|
1181
|
+
readonly challenge: Schema.String;
|
|
1182
|
+
readonly rp: Schema.Struct<{
|
|
1183
|
+
readonly id: Schema.String;
|
|
1184
|
+
readonly name: Schema.NonEmptyString;
|
|
1185
|
+
}>;
|
|
1186
|
+
readonly user: Schema.Struct<{
|
|
1187
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyUserHandle">;
|
|
1188
|
+
readonly name: Schema.NonEmptyString;
|
|
1189
|
+
readonly displayName: Schema.NonEmptyString;
|
|
1190
|
+
}>;
|
|
1191
|
+
readonly pubKeyCredParams: Schema.NonEmptyArray<Schema.Struct<{
|
|
1192
|
+
readonly type: Schema.Literal<"public-key">;
|
|
1193
|
+
readonly alg: Schema.Literals<readonly [-7, -257]>;
|
|
1194
|
+
}>>;
|
|
1195
|
+
readonly timeout: Schema.Int;
|
|
1196
|
+
readonly attestation: Schema.Literal<"none">;
|
|
1197
|
+
readonly authenticatorSelection: Schema.Struct<{
|
|
1198
|
+
readonly residentKey: Schema.Literals<readonly ["required", "preferred", "discouraged"]>;
|
|
1199
|
+
readonly userVerification: Schema.Literals<readonly ["required", "preferred"]>;
|
|
1200
|
+
}>;
|
|
1201
|
+
readonly excludeCredentials: Schema.$Array<Schema.Struct<{
|
|
1202
|
+
readonly type: Schema.Literal<"public-key">;
|
|
1203
|
+
readonly id: Schema.brand<Schema.String, "effect-auth/PasskeyProtocolCredentialId">;
|
|
1204
|
+
}>>;
|
|
1205
|
+
}>;
|
|
1206
|
+
}>;
|
|
1207
|
+
type PasskeyRegistrationStarted = typeof PasskeyRegistrationStarted.Type;
|
|
1208
|
+
declare const PasskeyCleanupResult: Schema.Struct<{
|
|
1209
|
+
readonly terminalized: Schema.Natural;
|
|
1210
|
+
readonly removed: Schema.Natural;
|
|
1211
|
+
readonly hasMore: Schema.Boolean;
|
|
1212
|
+
}>;
|
|
1213
|
+
type PasskeyCleanupResult = typeof PasskeyCleanupResult.Type;
|
|
1214
|
+
declare const PasskeyEnrolled: Schema.Struct<{
|
|
1215
|
+
readonly credential: Schema.Struct<{
|
|
1216
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1217
|
+
readonly name: Schema.NonEmptyString;
|
|
1218
|
+
readonly primarySignIn: Schema.Boolean;
|
|
1219
|
+
readonly createdAtMillis: Schema.Int;
|
|
1220
|
+
readonly lastUsedAtMillis: Schema.optionalKey<Schema.Int>;
|
|
1221
|
+
}>;
|
|
1222
|
+
readonly invalidation: Schema.Struct<{
|
|
1223
|
+
readonly trigger: Schema.Literals<readonly ["password-reset", "factor-reset", "credential-change", "subject-disable", "subject-delete", "identifier-change", "all-session-revocation"]>;
|
|
1224
|
+
readonly existingSessions: Schema.Literals<readonly ["immediate", "original-absolute-expiry"]>;
|
|
1225
|
+
readonly maximumExposureMillis: Schema.Natural;
|
|
1226
|
+
readonly oldAuthenticationEvidence: Schema.Literal<"rejected">;
|
|
1227
|
+
}>;
|
|
1228
|
+
}>;
|
|
1229
|
+
declare const PasskeyRemoved: Schema.Struct<{
|
|
1230
|
+
readonly credentialId: Schema.NonEmptyString;
|
|
1231
|
+
readonly replayed: Schema.Boolean;
|
|
1232
|
+
readonly invalidation: Schema.Struct<{
|
|
1233
|
+
readonly trigger: Schema.Literals<readonly ["password-reset", "factor-reset", "credential-change", "subject-disable", "subject-delete", "identifier-change", "all-session-revocation"]>;
|
|
1234
|
+
readonly existingSessions: Schema.Literals<readonly ["immediate", "original-absolute-expiry"]>;
|
|
1235
|
+
readonly maximumExposureMillis: Schema.Natural;
|
|
1236
|
+
readonly oldAuthenticationEvidence: Schema.Literal<"rejected">;
|
|
1237
|
+
}>;
|
|
1238
|
+
}>;
|
|
1239
|
+
declare const PasskeyRegistrationResult: Schema.Union<readonly [Schema.TaggedStruct<"RegistrationAccepted", {}>, Schema.TaggedStruct<"ProvisioningPending", {
|
|
1240
|
+
readonly reference: Schema.String;
|
|
1241
|
+
}>]>;
|
|
1242
|
+
type PasskeyRegistrationResult = typeof PasskeyRegistrationResult.Type;
|
|
1243
|
+
//#endregion
|
|
1244
|
+
export { PasskeyAccess, PasskeyActionAuthorization, PasskeyActionChallenge, PasskeyAssertion, PasskeyAssertionVerified, PasskeyAttestation, PasskeyAuthenticationOptions, PasskeyAuthenticationStarted, PasskeyBegin, PasskeyCeremony, PasskeyChallenge, PasskeyClaim, PasskeyClaimDecision, PasskeyCleanupResult, PasskeyCommandId, PasskeyComplete, PasskeyContext, PasskeyCounter, PasskeyCredential, PasskeyCredentialId, PasskeyCredentialSummary, PasskeyDescriptor, PasskeyEnrolled, PasskeyEnrollmentSnapshot, PasskeyEvidence, PasskeyGeneration, PasskeyInstant, PasskeyIssueDecision, PasskeyLabel, PasskeyModuleId, PasskeyProfile, PasskeyProfileId, PasskeyProtocolCredentialId, PasskeyPublicKey, PasskeyPurpose, PasskeyRegistrationComplete, PasskeyRegistrationOptions, PasskeyRegistrationResult, PasskeyRegistrationStarted, PasskeyRegistrationVerified, PasskeyRemoved, PasskeyRequirement, PasskeyRevision, PasskeyRpId, PasskeySettlement, PasskeyTarget, PasskeyUserHandle };
|
|
1245
|
+
//# sourceMappingURL=models.d.mts.map
|