auth0 3.4.0 → 4.0.0-beta.1

package/dist/cjs/auth/oauth.js

@@ -0,0 +1,199 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth = void 0;
+const runtime_js_1 = require("../lib/runtime.js");
+const base_auth_api_js_1 = require("./base-auth-api.js");
+const id_token_validator_js_1 = require("./id-token-validator.js");
+/**
+ *  OAuth 2.0 flows.
+ */
+class OAuth extends base_auth_api_js_1.BaseAuthAPI {
+    constructor(options) {
+        super(options);
+        this.idTokenValidator = new id_token_validator_js_1.IDTokenValidator(options);
+    }
+    async validateIdToken(tokenSet, idTokenValidateOptions) {
+        const { id_token: idToken } = tokenSet;
+        if (idToken) {
+            await this.idTokenValidator.validate(idToken, idTokenValidateOptions);
+        }
+    }
+    /**
+     * Perform an OAuth 2.0 grant.
+     * (You should only need this if you can't find the grant you need in this library.)
+     */
+    async grant(grantType, bodyParameters, { idTokenValidateOptions, initOverrides } = {}) {
+        const response = await this.request({
+            path: '/oauth/token',
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams({
+                client_id: this.clientId,
+                ...bodyParameters,
+                grant_type: grantType,
+            }),
+        }, initOverrides);
+        const res = await runtime_js_1.JSONApiResponse.fromResponse(response);
+        await this.validateIdToken(res.data, idTokenValidateOptions);
+        return res;
+    }
+    /**
+     * This is the flow that regular web apps use to access an API.
+     *
+     * Use this endpoint to exchange an Authorization Code for a Token.
+     *
+     * See: https://auth0.com/docs/api/authentication#authorization-code-flow44
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId',
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.oauth.authorizationCodeGrant({ code: 'mycode' });
+     * ```
+     */
+    async authorizationCodeGrant(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['code']);
+        return this.grant('authorization_code', await this.addClientAuthentication(bodyParameters, true), options);
+    }
+    /**
+     * PKCE was originally designed to protect the authorization code flow in mobile apps,
+     * but its ability to prevent authorization code injection makes it useful for every type of OAuth client,
+     * even web apps that use client authentication.
+     *
+     * See: https://auth0.com/docs/api/authentication#authorization-code-flow-with-pkce45
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId',
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.oauth.authorizationCodeGrantWithPKCE({
+     *   code: 'mycode',
+     *   code_verifier: 'mycodeverifier'
+     * });
+     * ```
+     */
+    async authorizationCodeGrantWithPKCE(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['code', 'code_verifier']);
+        return this.grant('authorization_code', await this.addClientAuthentication(bodyParameters, false), options);
+    }
+    /**
+     * This is the OAuth 2.0 grant that server processes use to access an API.
+     *
+     * Use this endpoint to directly request an Access Token by using the Client's credentials
+     * (a Client ID and a Client Secret or a Client Assertion).
+     *
+     * See: https://auth0.com/docs/api/authentication#client-credentials-flow
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId',
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.oauth.clientCredentialsGrant({ audience: 'myaudience' });
+     * ```
+     */
+    async clientCredentialsGrant(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['audience']);
+        return this.grant('client_credentials', await this.addClientAuthentication(bodyParameters, true), options);
+    }
+    /**
+     * This information is typically received from a highly trusted public client like a SPA*.
+     * (<strong>*Note:</string> For single-page applications and native/mobile apps, we recommend using web flows instead.)
+     *
+     * See: https://auth0.com/docs/api/authentication#resource-owner-password
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId'
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.oauth.clientCredentialsGrant({
+     *     username: 'myusername@example.com',
+     *     password: 'mypassword'
+     *   },
+     *   { headers: { 'auth0-forwarded-for': 'END.USER.IP.123' } }
+     * );
+     * ```
+     *
+     * Set the'auth0-forwarded-for' header to the end-user IP as a string value if you want
+     * brute-force protection to work in server-side scenarios.
+     *
+     * See https://auth0.com/docs/get-started/authentication-and-authorization-flow/avoid-common-issues-with-resource-owner-password-flow-and-attack-protection
+     *
+     */
+    async passwordGrant(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['username', 'password']);
+        return this.grant(bodyParameters.realm ? 'http://auth0.com/oauth/grant-type/password-realm' : 'password', await this.addClientAuthentication(bodyParameters, false), options);
+    }
+    /**
+     * Use this endpoint to refresh an Access Token using the Refresh Token you got during authorization.
+     *
+     * See: https://auth0.com/docs/api/authentication#refresh-token
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId'
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.oauth.refreshTokenGrant({ refresh_token: 'myrefreshtoken' })
+     * ```
+     */
+    async refreshTokenGrant(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['refresh_token']);
+        return this.grant('refresh_token', await this.addClientAuthentication(bodyParameters, false), options);
+    }
+    /**
+     * Use this endpoint to invalidate a Refresh Token if it has been compromised.
+     *
+     * The behaviour of this endpoint depends on the state of the <a href="https://auth0.com/docs/secure/tokens/refresh-tokens/revoke-refresh-tokens#refresh-tokens-and-grants">Refresh Token Revocation Deletes Grant</a> toggle.
+     * If this toggle is enabled, then each revocation request invalidates not only the specific token, but all other tokens based on the same authorization grant.
+     * This means that all Refresh Tokens that have been issued for the same user, application, and audience will be revoked.
+     * If this toggle is disabled, then only the refresh token is revoked, while the grant is left intact.
+     *
+     * See: https://auth0.com/docs/api/authentication#revoke-refresh-token
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId'
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.oauth.revokeRefreshToken({ token: 'myrefreshtoken' })
+     * ```
+     */
+    async revokeRefreshToken(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['token']);
+        const response = await this.request({
+            path: '/oauth/revoke',
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: await this.addClientAuthentication({ client_id: this.clientId, ...bodyParameters }, false),
+        }, options.initOverrides);
+        return runtime_js_1.VoidApiResponse.fromResponse(response);
+    }
+}
+exports.OAuth = OAuth;
+//# sourceMappingURL=oauth.js.map

package/dist/cjs/auth/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":";;;AAAA,kDAK2B;AAC3B,yDAA8E;AAC9E,mEAAmF;AAsKnF;;GAEG;AACH,MAAa,KAAM,SAAQ,8BAAW;IAEpC,YAAY,OAAoC;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,wCAAgB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,QAAkB,EAClB,sBAA+C;QAE/C,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;QACvC,IAAI,OAAO,EAAE;YACX,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;SACvE;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CACT,SAAiB,EACjB,cAAmC,EACnC,EAAE,sBAAsB,EAAE,aAAa,KAAmB,EAAE;QAE5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,GAAG,cAAc;gBACjB,UAAU,EAAE,SAAS;aACtB,CAAC;SACH,EACD,aAAa,CACd,CAAC;QAEF,MAAM,GAAG,GAA8B,MAAM,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpF,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QAC7D,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD,OAAO,IAAI,CAAC,KAAK,CACf,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,IAAI,CAAC,EACxD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,8BAA8B,CAClC,cAAqD,EACrD,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzE,OAAO,IAAI,CAAC,KAAK,CACf,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,KAAK,CAAC,EACzD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,KAAK,CACf,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,IAAI,CAAC,EACxD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,aAAa,CACjB,cAAoC,EACpC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,OAAO,IAAI,CAAC,KAAK,CACf,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,UAAU,EACtF,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,KAAK,CAAC,EACzD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CACrB,cAAwC,EACxC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,KAAK,CACf,eAAe,EACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,KAAK,CAAC,EACzD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,kBAAkB,CACtB,cAAyC,EACzC,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAuB,CACtC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,EAAE,EAC/C,KAAK,CACN;SACF,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;CACF;AAlQD,sBAkQC"}

package/dist/cjs/auth/passwordless.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Passwordless = void 0;
+const runtime_js_1 = require("../lib/runtime.js");
+const base_auth_api_js_1 = require("./base-auth-api.js");
+const oauth_js_1 = require("./oauth.js");
+/**
+ * Handles passwordless flows using Email and SMS.
+ */
+class Passwordless extends base_auth_api_js_1.BaseAuthAPI {
+    constructor(configuration) {
+        super(configuration);
+        this.oauth = new oauth_js_1.OAuth(configuration);
+    }
+    /**
+     * Start passwordless flow sending an email.
+     *
+     * Given the user `email` address, it will send an email with:
+     *
+     * <ul>
+     *   <li>A link (default, `send:"link"`). You can then authenticate with this
+     *     user opening the link and he will be automatically logged in to the
+     *     application. Optionally, you can append/override parameters to the link
+     *     (like `scope`, `redirect_uri`, `protocol`, `response_type`, etc.) using
+     *     `authParams` object.
+     *   </li>
+     *   <li>
+     *     A verification code (`send:"code"`). You can then authenticate with
+     *     this user using the `/oauth/token` endpoint specifying `email` as
+     *     `username` and `code` as `password`.
+     *   </li>
+     * </ul>
+     *
+     * See: https://auth0.com/docs/api/authentication#get-code-or-link
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId',
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.passwordless.sendEmail({
+     *   email: '{EMAIL}',
+     *   send: 'link',
+     *   authParams: {} // Optional auth params.
+     * });
+     * ```
+     */
+    async sendEmail(bodyParameters, initOverrides) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['email']);
+        const response = await this.request({
+            path: '/passwordless/start',
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: await this.addClientAuthentication({ client_id: this.clientId, connection: 'email', ...bodyParameters }, false),
+        }, initOverrides);
+        return runtime_js_1.VoidApiResponse.fromResponse(response);
+    }
+    /**
+     * Start passwordless flow sending an SMS.
+     *
+     * Given the user `phone_number`, it will send a SMS message with a
+     * verification code. You can then authenticate with this user using the
+     * `/oauth/token` endpoint specifying `phone_number` as `username` and `code` as
+     * `password`:
+     *
+     * See: https://auth0.com/docs/api/authentication#get-code-or-link
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId',
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.passwordless.sendSMS({
+     *   phone_number: '{PHONE}'
+     * });
+     * ```
+     */
+    async sendSMS(bodyParameters, initOverrides) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['phone_number']);
+        const response = await this.request({
+            path: '/passwordless/start',
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: await this.addClientAuthentication({ client_id: this.clientId, connection: 'sms', ...bodyParameters }, false),
+        }, initOverrides);
+        return runtime_js_1.VoidApiResponse.fromResponse(response);
+    }
+    /**
+     * Once you have a verification code, use this endpoint to login the user with their email and verification code.
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId',
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.passwordless.loginWithEmail({
+     *   email: 'foo@example.com',
+     *   code: 'ABC123'
+     * });
+     * ```
+     */
+    async loginWithEmail(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['email', 'code']);
+        const { email: username, code: otp, ...otherParams } = bodyParameters;
+        return this.oauth.grant('http://auth0.com/oauth/grant-type/passwordless/otp', await this.addClientAuthentication({
+            username,
+            otp,
+            realm: 'email',
+            ...otherParams,
+        }, false), options);
+    }
+    /**
+     * Once you have a verification code, use this endpoint to login the user with their phone number and verification code.
+     *
+     * @example
+     * ```js
+     * const auth0 = new AuthenticationApi({
+     *    domain: 'my-domain.auth0.com',
+     *    clientId: 'myClientId',
+     *    clientSecret: 'myClientSecret'
+     * });
+     *
+     * await auth0.passwordless.loginWithSMS({
+     *   phone_number: '0777777777',
+     *   code: 'ABC123'
+     * });
+     * ```
+     */
+    async loginWithSMS(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['phone_number', 'code']);
+        const { phone_number: username, code: otp, ...otherParams } = bodyParameters;
+        return this.oauth.grant('http://auth0.com/oauth/grant-type/passwordless/otp', await this.addClientAuthentication({
+            username,
+            otp,
+            realm: 'sms',
+            ...otherParams,
+        }, false), options);
+    }
+}
+exports.Passwordless = Passwordless;
+//# sourceMappingURL=passwordless.js.map

package/dist/cjs/auth/passwordless.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwordless.js","sourceRoot":"","sources":["../../../src/auth/passwordless.ts"],"names":[],"mappings":";;;AAAA,kDAK2B;AAC3B,yDAA8E;AAC9E,yCAA8E;AAkE9E;;GAEG;AACH,MAAa,YAAa,SAAQ,8BAAW;IAE3C,YAAY,aAA0C;QACpD,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAK,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,KAAK,CAAC,SAAS,CACb,cAAgC,EAChC,aAA4B;QAE5B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAuB,CACtC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,EACpE,KAAK,CACN;SACF,EACD,aAAa,CACd,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,OAAO,CACX,cAA8B,EAC9B,aAA4B;QAE5B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAuB,CACtC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,EAClE,KAAK,CACN;SACF,EACD,aAAa,CACd,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,cAAc,CAClB,cAAqC,EACrC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAEjE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,cAAc,CAAC;QAEtE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CACrB,oDAAoD,EACpD,MAAM,IAAI,CAAC,uBAAuB,CAChC;YACE,QAAQ;YACR,GAAG;YACH,KAAK,EAAE,OAAO;YACd,GAAG,WAAW;SACf,EACD,KAAK,CACN,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,YAAY,CAChB,cAAmC,EACnC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QAExE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,cAAc,CAAC;QAE7E,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CACrB,oDAAoD,EACpD,MAAM,IAAI,CAAC,uBAAuB,CAChC;YACE,QAAQ;YACR,GAAG;YACH,KAAK,EAAE,KAAK;YACZ,GAAG,WAAW;SACf,EACD,KAAK,CACN,EACD,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AAjMD,oCAiMC"}

package/dist/cjs/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./management/index.js"), exports);
+__exportStar(require("./auth/index.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,kDAAgC"}

package/dist/cjs/lib/errors.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequiredError = exports.FetchError = exports.TimeoutError = exports.ResponseError = void 0;
+/**
+ * Error thrown when the API returns an error response that can't be parsed to a more specific Error instance.
+ */
+class ResponseError extends Error {
+    constructor(statusCode, body, headers, msg) {
+        super(msg);
+        this.statusCode = statusCode;
+        this.body = body;
+        this.headers = headers;
+        this.name = 'ResponseError';
+    }
+}
+exports.ResponseError = ResponseError;
+/**
+ * Error thrown when the request is aborted due to a timeout.
+ */
+class TimeoutError extends Error {
+    constructor() {
+        super('The request was timed out.');
+        this.name = 'TimeoutError';
+    }
+}
+exports.TimeoutError = TimeoutError;
+/**
+ * Error thrown when there is a network error.
+ */
+class FetchError extends Error {
+    constructor(cause, msg) {
+        super(msg);
+        this.cause = cause;
+        this.name = 'FetchError';
+    }
+}
+exports.FetchError = FetchError;
+/**
+ * Error thrown when a required argument was not provided.
+ */
+class RequiredError extends Error {
+    constructor(field, msg) {
+        super(msg);
+        this.field = field;
+        this.name = 'RequiredError';
+    }
+}
+exports.RequiredError = RequiredError;
+//# sourceMappingURL=errors.js.map

package/dist/cjs/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/lib/errors.ts"],"names":[],"mappings":";;;AACA;;GAEG;AACH,MAAa,aAAc,SAAQ,KAAK;IAEtC,YACS,UAAkB,EAClB,IAAY,EACZ,OAAgB,EACvB,GAAY;QAEZ,KAAK,CAAC,GAAG,CAAC,CAAC;QALJ,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAS;QAJhB,SAAI,GAAG,eAAwB,CAAC;IAQzC,CAAC;CACF;AAVD,sCAUC;AAED;;GAEG;AACH,MAAa,YAAa,SAAQ,KAAK;IAErC;QACE,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAF7B,SAAI,GAAG,cAAuB,CAAC;IAGxC,CAAC;CACF;AALD,oCAKC;AAED;;GAEG;AACH,MAAa,UAAW,SAAQ,KAAK;IAEnC,YAAmB,KAAY,EAAE,GAAY;QAC3C,KAAK,CAAC,GAAG,CAAC,CAAC;QADM,UAAK,GAAL,KAAK,CAAO;QADtB,SAAI,GAAG,YAAqB,CAAC;IAGtC,CAAC;CACF;AALD,gCAKC;AAED;;GAEG;AACH,MAAa,aAAc,SAAQ,KAAK;IAEtC,YAAmB,KAAa,EAAE,GAAY;QAC5C,KAAK,CAAC,GAAG,CAAC,CAAC;QADM,UAAK,GAAL,KAAK,CAAQ;QADvB,SAAI,GAAG,eAAwB,CAAC;IAGzC,CAAC;CACF;AALD,sCAKC"}

package/dist/cjs/lib/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./errors.js"), exports);
+__exportStar(require("./models.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,8CAA4B"}

package/dist/cjs/lib/middleware/telemetry-middleware.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryMiddleware = void 0;
+const utils_js_1 = require("../../utils.js");
+const jose_1 = require("jose");
+/**
+ * @private
+ */
+class TelemetryMiddleware {
+    constructor(options) {
+        this.clientInfo = options.clientInfo || (0, utils_js_1.generateClientInfo)();
+    }
+    async pre(context) {
+        if ('string' === typeof this.clientInfo.name && this.clientInfo.name.length > 0) {
+            context.init.headers = {
+                ...context.init.headers,
+                'Auth0-Client': jose_1.base64url.encode(JSON.stringify(this.clientInfo)),
+            };
+        }
+        return {
+            url: context.url,
+            init: context.init,
+        };
+    }
+}
+exports.TelemetryMiddleware = TelemetryMiddleware;
+//# sourceMappingURL=telemetry-middleware.js.map

package/dist/cjs/lib/middleware/telemetry-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-middleware.js","sourceRoot":"","sources":["../../../../src/lib/middleware/telemetry-middleware.ts"],"names":[],"mappings":";;;AAAA,6CAAoD;AAEpD,+BAAiC;AAEjC;;GAEG;AACH,MAAa,mBAAmB;IAG9B,YAAY,OAAsB;QAChC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAA,6BAAkB,GAAE,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,GAAG,CAAE,OAAuB;QAChC,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;YAC/E,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG;gBACrB,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO;gBACvB,cAAc,EAAE,gBAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;aAClE,CAAC;SACH;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC;IACJ,CAAC;CACF;AApBD,kDAoBC"}

package/dist/cjs/lib/models.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TextApiResponse = exports.VoidApiResponse = exports.JSONApiResponse = void 0;
+class JSONApiResponse {
+    constructor(data, headers, status, statusText) {
+        this.data = data;
+        this.headers = headers;
+        this.status = status;
+        this.statusText = statusText;
+    }
+    static async fromResponse(raw) {
+        const value = (await raw.json());
+        return new JSONApiResponse(value, raw.headers, raw.status, raw.statusText);
+    }
+}
+exports.JSONApiResponse = JSONApiResponse;
+class VoidApiResponse {
+    constructor(headers, status, statusText) {
+        this.headers = headers;
+        this.status = status;
+        this.statusText = statusText;
+    }
+    static async fromResponse(raw) {
+        return new VoidApiResponse(raw.headers, raw.status, raw.statusText);
+    }
+}
+exports.VoidApiResponse = VoidApiResponse;
+class TextApiResponse {
+    constructor(data, headers, status, statusText) {
+        this.data = data;
+        this.headers = headers;
+        this.status = status;
+        this.statusText = statusText;
+    }
+    static async fromResponse(raw) {
+        const value = await raw.text();
+        return new TextApiResponse(value, raw.headers, raw.status, raw.statusText);
+    }
+}
+exports.TextApiResponse = TextApiResponse;
+//# sourceMappingURL=models.js.map

package/dist/cjs/lib/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../../src/lib/models.ts"],"names":[],"mappings":";;;AAsFA,MAAa,eAAe;IAC1B,YACS,IAAO,EACP,OAAgB,EACd,MAAc,EACd,UAAkB;QAHpB,SAAI,GAAJ,IAAI,CAAG;QACP,YAAO,GAAP,OAAO,CAAS;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAQ;IAC1B,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,YAAY,CAAc,GAAa;QAClD,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,OAAO,IAAI,eAAe,CAAI,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAChF,CAAC;CACF;AAZD,0CAYC;AAED,MAAa,eAAe;IAE1B,YAAmB,OAAgB,EAAW,MAAc,EAAW,UAAkB;QAAtE,YAAO,GAAP,OAAO,CAAS;QAAW,WAAM,GAAN,MAAM,CAAQ;QAAW,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAE7F,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAa;QACrC,OAAO,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC;CACF;AAPD,0CAOC;AAED,MAAa,eAAe;IAC1B,YACS,IAAY,EACZ,OAAgB,EACd,MAAc,EACd,UAAkB;QAHpB,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAS;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAQ;IAC1B,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAa;QACrC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;CACF;AAZD,0CAYC"}

package/dist/cjs/lib/retry.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.retry = void 0;
+const MAX_REQUEST_RETRY_JITTER = 250;
+const MAX_REQUEST_RETRY_DELAY = 10000;
+const MIN_REQUEST_RETRY_DELAY = 250;
+const DEFAULT_NUMBER_RETRIES = 5;
+const MAX_NUMBER_RETRIES = 10;
+const BASE_DELAY = 250;
+/**
+ * @private
+ * Function that returns a random int between a configurable min and max.
+ * @param min The min value
+ * @param max  The max value
+ * @returns {number} The random generated value
+ */
+function getRandomInt(min, max) {
+    min = Math.ceil(min);
+    max = Math.floor(max);
+    return Math.floor(Math.random() * (max - min) + min); // The maximum is exclusive and the minimum is inclusive
+}
+/**
+ * @private
+ * Function that returns a promise which resolves after a configurable amount of milliseconds
+ * @param delay value to be used for the delay
+ * @returns {Promise} A delayed promise
+ */
+async function pause(delay) {
+    return new Promise((resolve) => setTimeout(resolve, delay));
+}
+/**
+ * @private
+ * Function that retries the provided action callback for a configurable amount of time, defaults to 3.
+ */
+function retry(action, { maxRetries, retryWhen }) {
+    const nrOfTriesToAttempt = Math.min(MAX_NUMBER_RETRIES, maxRetries !== null && maxRetries !== void 0 ? maxRetries : DEFAULT_NUMBER_RETRIES);
+    let nrOfTries = 0;
+    const retryAndWait = async () => {
+        let result;
+        result = await action();
+        if ((retryWhen || [429]).includes(result.status) && nrOfTries < nrOfTriesToAttempt) {
+            nrOfTries++;
+            let wait = BASE_DELAY * Math.pow(2, nrOfTries - 1);
+            wait = getRandomInt(wait + 1, wait + MAX_REQUEST_RETRY_JITTER);
+            wait = Math.min(wait, MAX_REQUEST_RETRY_DELAY);
+            wait = Math.max(wait, MIN_REQUEST_RETRY_DELAY);
+            await pause(wait);
+            result = await retryAndWait();
+        }
+        return result;
+    };
+    return retryAndWait();
+}
+exports.retry = retry;
+//# sourceMappingURL=retry.js.map

package/dist/cjs/lib/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../../src/lib/retry.ts"],"names":[],"mappings":";;;AAEA,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,GAAW;IAC5C,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,wDAAwD;AAChH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,KAAK,CAAC,KAAa;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9D,CAAC;AAwBD;;;GAGG;AACH,SAAgB,KAAK,CACnB,MAA+B,EAC/B,EAAE,UAAU,EAAE,SAAS,EAAsB;IAE7C,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,sBAAsB,CAAC,CAAC;IAC9F,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,IAAI,MAAgB,CAAC;QAErB,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS,GAAG,kBAAkB,EAAE;YAClF,SAAS,EAAE,CAAC;YAEZ,IAAI,IAAI,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;YACnD,IAAI,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,wBAAwB,CAAC,CAAC;YAC/D,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;YAC/C,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;YAE/C,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAElB,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;SAC/B;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AA7BD,sBA6BC"}