auth0 4.0.0-beta.0 → 4.0.0-beta.10

package/README.md

@@ -8,7 +8,7 @@
 [![License](https://img.shields.io/:license-mit-blue.svg?style=flat)](https://opensource.org/licenses/MIT)
 ![CircleCI](https://img.shields.io/circleci/build/github/auth0/node-auth0)
 
-📚 [Documentation](#documentation) - 🚀 [Getting Started](#getting-started) - 💬 [Feedback](#feedback)
+📚 [Documentation](#documentation) - 🚀 [Getting Started](#getting-started) - 💻 [API Reference](#api-reference) - 💬 [Feedback](#feedback)
 
 ## Documentation
 
@@ -20,7 +20,7 @@
 
 This library supports the following tooling versions:
 
-- Node.js: `>=16`
+- Node.js: `>=18`
 
 ### Installation
 
@@ -36,8 +36,6 @@ npm install auth0@beta
 
 This client can be used to access Auth0's [Authentication API](https://auth0.com/docs/api/authentication).
 
-The **AuthenticationClient** constructor takes an _optional_ client ID, if specified it will be used as default value for all endpoints that accept a client ID.
-
 ```js
 import { AuthenticationClient } from 'auth0';
 
@@ -48,32 +46,42 @@ const auth0 = new AuthenticationClient({
 });
 ```
 
+See [more examples](./EXAMPLES.md#authentication-client).
+
 #### Management API Client
 
 The Auth0 Management API is meant to be used by back-end servers or trusted parties performing administrative tasks. Generally speaking, anything that can be done through the Auth0 dashboard (and more) can also be done through this API.
 
-Initialize your client class with an API v2 token and a domain.
+Initialize your client class with a client ID, client secret and a domain.
 
 ```js
 import { ManagementClient } from 'auth0';
 
 var management = new ManagementClient({
-  domain: '{YOUR_ACCOUNT}.auth0.com',
-  token: '{YOUR_API_V2_TOKEN}',
+  domain: '{YOUR_TENANT_AND REGION}.auth0.com',
+  clientId: '{YOUR_CLIENT_ID}',
+  clientSecret: '{YOUR_CLIENT_SECRET}',
 });
 ```
 
-Or, initialize your client class with a client secret and a domain.
+Or, initialize your client class with an API v2 token and a domain.
 
 ```js
 import { ManagementClient } from 'auth0';
 
 var management = new ManagementClient({
+  domain: '{YOUR_TENANT_AND REGION}.auth0.com',
   token: '{YOUR_API_V2_TOKEN}',
-  domain: '{YOUR_ACCOUNT}.auth0.com',
 });
 ```
 
+See [more examples](./EXAMPLES.md#management-client).
+
+## API Reference
+
+- [AuthenticationClient](https://auth0.github.io/node-auth0/beta/classes/auth.AuthenticationClient.html)
+- [ManagementClient](https://auth0.github.io/node-auth0/beta/classes/management.ManagementClient.html)
+
 ## Feedback
 
 ### Contributing

package/dist/cjs/auth/base-auth-api.d.ts

@@ -0,0 +1,39 @@
+import { BaseAPI, ClientOptions, InitOverrideFunction, JSONApiResponse, RequestOpts } from '../lib/runtime.js';
+import { AddClientAuthenticationPayload } from './client-authentication.js';
+import { IDTokenValidator } from './id-token-validator.js';
+import { GrantOptions, TokenSet } from './oauth.js';
+export interface AuthenticationClientOptions extends ClientOptions {
+    domain: string;
+    clientId: string;
+    clientSecret?: string;
+    clientAssertionSigningKey?: string;
+    clientAssertionSigningAlg?: string;
+    idTokenSigningAlg?: string;
+    clockTolerance?: number;
+}
+export declare class AuthApiError extends Error {
+    error: string;
+    error_description: string;
+    statusCode: number;
+    body: string;
+    headers: Headers;
+    name: "AuthApiError";
+    constructor(error: string, error_description: string, statusCode: number, body: string, headers: Headers);
+}
+export declare class BaseAuthAPI extends BaseAPI {
+    domain: string;
+    clientId: string;
+    clientSecret?: string;
+    clientAssertionSigningKey?: string;
+    clientAssertionSigningAlg?: string;
+    constructor(options: AuthenticationClientOptions);
+    /**
+     * @private
+     */
+    protected addClientAuthentication(payload: AddClientAuthenticationPayload): Promise<AddClientAuthenticationPayload>;
+}
+/**
+ * @private
+ * Perform an OAuth 2.0 grant.
+ */
+export declare function grant(grantType: string, bodyParameters: Record<string, any>, { idTokenValidateOptions, initOverrides }: GrantOptions | undefined, clientId: string, idTokenValidator: IDTokenValidator, request: (context: RequestOpts, initOverrides?: RequestInit | InitOverrideFunction) => Promise<Response>): Promise<JSONApiResponse<TokenSet>>;

package/dist/cjs/auth/base-auth-api.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.grant = exports.BaseAuthAPI = exports.AuthApiError = void 0;
+const errors_js_1 = require("../lib/errors.js");
+const runtime_js_1 = require("../lib/runtime.js");
+const client_authentication_js_1 = require("./client-authentication.js");
+const telemetry_middleware_js_1 = require("../lib/middleware/telemetry-middleware.js");
+class AuthApiError extends Error {
+    constructor(error, error_description, statusCode, body, headers) {
+        super(error_description || error);
+        this.error = error;
+        this.error_description = error_description;
+        this.statusCode = statusCode;
+        this.body = body;
+        this.headers = headers;
+        this.name = 'AuthApiError';
+    }
+}
+exports.AuthApiError = AuthApiError;
+function parseErrorBody(body) {
+    const rawData = JSON.parse(body);
+    let data;
+    if (rawData.error) {
+        data = rawData;
+    }
+    else {
+        data = {
+            error: rawData.code,
+            error_description: rawData.description,
+        };
+    }
+    return data;
+}
+async function parseError(response) {
+    // Errors typically have a specific format:
+    // {
+    //    error: 'invalid_body',
+    //    error_description: 'Bad Request',
+    // }
+    const body = await response.text();
+    try {
+        const data = parseErrorBody(body);
+        return new AuthApiError(data.error, data.error_description, response.status, body, response.headers);
+    }
+    catch (_) {
+        return new errors_js_1.ResponseError(response.status, body, response.headers, 'Response returned an error code');
+    }
+}
+class BaseAuthAPI extends runtime_js_1.BaseAPI {
+    constructor(options) {
+        super({
+            ...options,
+            baseUrl: `https://${options.domain}`,
+            middleware: options.telemetry !== false ? [new telemetry_middleware_js_1.TelemetryMiddleware(options)] : [],
+            parseError,
+            retry: { enabled: false, ...options.retry },
+        });
+        this.domain = options.domain;
+        this.clientId = options.clientId;
+        this.clientSecret = options.clientSecret;
+        this.clientAssertionSigningKey = options.clientAssertionSigningKey;
+        this.clientAssertionSigningAlg = options.clientAssertionSigningAlg;
+    }
+    /**
+     * @private
+     */
+    async addClientAuthentication(payload) {
+        return (0, client_authentication_js_1.addClientAuthentication)({
+            payload,
+            domain: this.domain,
+            clientId: this.clientId,
+            clientSecret: this.clientSecret,
+            clientAssertionSigningKey: this.clientAssertionSigningKey,
+            clientAssertionSigningAlg: this.clientAssertionSigningAlg,
+        });
+    }
+}
+exports.BaseAuthAPI = BaseAuthAPI;
+/**
+ * @private
+ * Perform an OAuth 2.0 grant.
+ */
+async function grant(grantType, bodyParameters, { idTokenValidateOptions, initOverrides } = {}, clientId, idTokenValidator, request) {
+    const response = await request({
+        path: '/oauth/token',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+        },
+        body: new URLSearchParams({
+            client_id: clientId,
+            ...bodyParameters,
+            grant_type: grantType,
+        }),
+    }, initOverrides);
+    const res = await runtime_js_1.JSONApiResponse.fromResponse(response);
+    if (res.data.id_token) {
+        await idTokenValidator.validate(res.data.id_token, idTokenValidateOptions);
+    }
+    return res;
+}
+exports.grant = grant;
+//# sourceMappingURL=base-auth-api.js.map

package/dist/cjs/auth/base-auth-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-auth-api.js","sourceRoot":"","sources":["../../../src/auth/base-auth-api.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AACjD,kDAM2B;AAC3B,yEAGoC;AAGpC,uFAAgF;AAiBhF,MAAa,YAAa,SAAQ,KAAK;IAErC,YACS,KAAa,EACb,iBAAyB,EACzB,UAAkB,EAClB,IAAY,EACZ,OAAgB;QAEvB,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC;QAN3B,UAAK,GAAL,KAAK,CAAQ;QACb,sBAAiB,GAAjB,iBAAiB,CAAQ;QACzB,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAS;QANhB,SAAI,GAAG,cAAuB,CAAC;IASxC,CAAC;CACF;AAXD,oCAWC;AAED,SAAS,cAAc,CAAC,IAAS;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAA0B,CAAC;IAE/B,IAAI,OAAO,CAAC,KAAK,EAAE;QACjB,IAAI,GAAG,OAA+B,CAAC;KACxC;SAAM;QACL,IAAI,GAAG;YACL,KAAK,EAAE,OAAO,CAAC,IAAI;YACnB,iBAAiB,EAAE,OAAO,CAAC,WAAW;SACvC,CAAC;KACH;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAkB;IAC1C,2CAA2C;IAC3C,IAAI;IACJ,4BAA4B;IAC5B,uCAAuC;IACvC,IAAI;IAEJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI;QACF,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAElC,OAAO,IAAI,YAAY,CACrB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,iBAAiB,EACtB,QAAQ,CAAC,MAAM,EACf,IAAI,EACJ,QAAQ,CAAC,OAAO,CACjB,CAAC;KACH;IAAC,OAAO,CAAC,EAAE;QACV,OAAO,IAAI,yBAAa,CACtB,QAAQ,CAAC,MAAM,EACf,IAAI,EACJ,QAAQ,CAAC,OAAO,EAChB,iCAAiC,CAClC,CAAC;KACH;AACH,CAAC;AACD,MAAa,WAAY,SAAQ,oBAAO;IAOtC,YAAY,OAAoC;QAC9C,KAAK,CAAC;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,WAAW,OAAO,CAAC,MAAM,EAAE;YACpC,UAAU,EAAE,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,6CAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACjF,UAAU;YACV,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;QACnE,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IACrE,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,uBAAuB,CACrC,OAAuC;QAEvC,OAAO,IAAA,kDAAuB,EAAC;YAC7B,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;YACzD,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;SAC1D,CAAC,CAAC;IACL,CAAC;CACF;AAtCD,kCAsCC;AAED;;;GAGG;AACI,KAAK,UAAU,KAAK,CACzB,SAAiB,EACjB,cAAmC,EACnC,EAAE,sBAAsB,EAAE,aAAa,KAAmB,EAAE,EAC5D,QAAgB,EAChB,gBAAkC,EAClC,OAGsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,SAAS,EAAE,QAAQ;YACnB,GAAG,cAAc;YACjB,UAAU,EAAE,SAAS;SACtB,CAAC;KACH,EACD,aAAa,CACd,CAAC;IAEF,MAAM,GAAG,GAA8B,MAAM,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpF,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE;QACrB,MAAM,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;KAC5E;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAhCD,sBAgCC"}

package/dist/cjs/auth/client-authentication.d.ts

@@ -0,0 +1,26 @@
+export interface AddClientAuthenticationPayload {
+    client_id?: string;
+    client_secret?: string;
+    client_assertion?: string;
+    client_assertion_type?: string;
+    [key: string]: any;
+}
+interface AddClientAuthenticationOptions {
+    payload: AddClientAuthenticationPayload;
+    domain: string;
+    clientId: string;
+    required?: boolean;
+    clientAssertionSigningKey?: string;
+    clientAssertionSigningAlg?: string;
+    clientSecret?: string;
+}
+/**
+ * Adds client authentication, if available, to the provided payload.
+ *
+ * Adds `client_secret` for Client Secret Post token endpoint auth method (the SDK doesn't use Client Secret Basic)
+ * Adds `client_assertion` and `client_assertion_type` for Private Key JWT token endpoint auth method.
+ *
+ * If `clientAssertionSigningKey` is provided it takes precedent over `clientSecret` .
+ */
+export declare const addClientAuthentication: ({ payload, domain, clientId, clientAssertionSigningKey, clientAssertionSigningAlg, clientSecret, }: AddClientAuthenticationOptions) => Promise<Record<string, unknown>>;
+export {};

package/dist/cjs/auth/client-authentication.js

@@ -0,0 +1,63 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addClientAuthentication = void 0;
+const jose = __importStar(require("jose"));
+const uuid_1 = require("uuid");
+/**
+ * Adds client authentication, if available, to the provided payload.
+ *
+ * Adds `client_secret` for Client Secret Post token endpoint auth method (the SDK doesn't use Client Secret Basic)
+ * Adds `client_assertion` and `client_assertion_type` for Private Key JWT token endpoint auth method.
+ *
+ * If `clientAssertionSigningKey` is provided it takes precedent over `clientSecret` .
+ */
+const addClientAuthentication = async ({ payload, domain, clientId, clientAssertionSigningKey, clientAssertionSigningAlg, clientSecret, }) => {
+    const cid = payload.client_id || clientId;
+    if (clientAssertionSigningKey && !payload.client_assertion) {
+        const alg = clientAssertionSigningAlg || 'RS256';
+        const privateKey = await jose.importPKCS8(clientAssertionSigningKey, alg);
+        payload.client_assertion = await new jose.SignJWT({})
+            .setProtectedHeader({ alg })
+            .setIssuedAt()
+            .setSubject(cid)
+            .setJti((0, uuid_1.v4)())
+            .setIssuer(cid)
+            .setAudience(`https://${domain}/`)
+            .setExpirationTime('2mins')
+            .sign(privateKey);
+        payload.client_assertion_type = 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer';
+    }
+    else if (clientSecret && !payload.client_secret) {
+        payload.client_secret = clientSecret;
+    }
+    if ((!payload.client_secret || payload.client_secret.trim().length === 0) &&
+        (!payload.client_assertion || payload.client_assertion.trim().length === 0)) {
+        throw new Error('The client_secret or client_assertion field is required.');
+    }
+    return payload;
+};
+exports.addClientAuthentication = addClientAuthentication;
+//# sourceMappingURL=client-authentication.js.map

package/dist/cjs/auth/client-authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-authentication.js","sourceRoot":"","sources":["../../../src/auth/client-authentication.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,+BAAkC;AAoBlC;;;;;;;GAOG;AACI,MAAM,uBAAuB,GAAG,KAAK,EAAE,EAC5C,OAAO,EACP,MAAM,EACN,QAAQ,EACR,yBAAyB,EACzB,yBAAyB,EACzB,YAAY,GACmB,EAAoC,EAAE;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC;IAC1C,IAAI,yBAAyB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE;QAC1D,MAAM,GAAG,GAAG,yBAAyB,IAAI,OAAO,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAE1E,OAAO,CAAC,gBAAgB,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;aAClD,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC;aAC3B,WAAW,EAAE;aACb,UAAU,CAAC,GAAG,CAAC;aACf,MAAM,CAAC,IAAA,SAAI,GAAE,CAAC;aACd,SAAS,CAAC,GAAG,CAAC;aACd,WAAW,CAAC,WAAW,MAAM,GAAG,CAAC;aACjC,iBAAiB,CAAC,OAAO,CAAC;aAC1B,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,OAAO,CAAC,qBAAqB,GAAG,wDAAwD,CAAC;KAC1F;SAAM,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;QACjD,OAAO,CAAC,aAAa,GAAG,YAAY,CAAC;KACtC;IACD,IACE,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;QACrE,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAC3E;QACA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;KAC7E;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAjCW,QAAA,uBAAuB,2BAiClC"}

package/dist/cjs/auth/database.d.ts

@@ -0,0 +1,157 @@
+import { InitOverride, JSONApiResponse, TextApiResponse } from '../lib/models.js';
+import { BaseAuthAPI } from './base-auth-api.js';
+export interface SignUpRequest {
+    /**
+     * The client_id of your client.
+     * Use if you want to override the class's `clientId`
+     */
+    client_id?: string;
+    /**
+     * The user's email address.
+     */
+    email: string;
+    /**
+     * The user's desired password.
+     */
+    password: string;
+    /**
+     * The name of the database configured to your client.
+     */
+    connection: string;
+    /**
+     * The user's username. Only valid if the connection requires a username.
+     */
+    username?: string;
+    /**
+     * The user's given name(s).
+     */
+    given_name?: string;
+    /**
+     * The user's family name(s).
+     */
+    family_name?: string;
+    /**
+     * The user's full name.
+     */
+    name?: string;
+    /**
+     *The user's nickname.
+     */
+    nickname?: string;
+    /**
+     * A URI pointing to the user's picture.
+     */
+    picture?: string;
+    /**
+     * The user metadata to be associated with the user. If set, the field must be an object containing no more than ten properties. Property names can have a maximum of 100 characters, and property values must be strings of no more than 500 characters.
+     */
+    user_metadata?: {
+        [key: string]: unknown;
+    };
+}
+export interface SignUpResponse {
+    /**
+     * Email address of the new user.
+     */
+    email: string;
+    /**
+     * Indicates whether the email has been verified or not.
+     */
+    email_verified: boolean;
+    /**
+     * The server can return `_id`, `id` or `user_id` depending on various factors.
+     * For convenience we expose it here as just `id`.
+     */
+    id: string;
+    /**
+     * Username of this user.
+     */
+    username?: string;
+    /**
+     * The user's given name(s).
+     */
+    given_name?: string;
+    /**
+     * The user's family name(s).
+     */
+    family_name?: string;
+    /**
+     * The user's full name.
+     */
+    name?: string;
+    /**
+     *The user's nickname.
+     */
+    nickname?: string;
+    /**
+     * A URI pointing to the user's picture.
+     */
+    picture?: string;
+    /**
+     * The user metadata to be associated with the user. If set, the field must be an object containing no more than ten properties. Property names can have a maximum of 100 characters, and property values must be strings of no more than 500 characters.
+     */
+    user_metadata?: {
+        [key: string]: unknown;
+    };
+}
+export interface ChangePasswordRequest {
+    /**
+     * The client_id of your client.
+     * Use if you want to override the class's `clientId`
+     */
+    client_id?: string;
+    /**
+     * The user's email address.
+     */
+    email: string;
+    /**
+     * The name of the database configured to your client.
+     */
+    connection: string;
+    /**
+     * The organization_id of the Organization associated with the user.
+     */
+    organization?: string;
+}
+/**
+ * Sign-up and change-password for Database & Active Directory authentication services.
+ */
+export declare class Database extends BaseAuthAPI {
+    /**
+     * Given a user's credentials, and a connection, this endpoint will create a new user using active authentication.
+     *
+     * This endpoint only works for database connections.
+     *
+     * See: https://auth0.com/docs/api/authentication#signup
+     *
+     * @example
+     * ```js
+     * var data = {
+     *   email: '{EMAIL}',
+     *   password: '{PASSWORD}',
+     *   connection: 'Username-Password-Authentication'
+     * };
+     *
+     * await auth0.database.signUp(data);
+     * ```
+     */
+    signUp(bodyParameters: SignUpRequest, initOverrides?: InitOverride): Promise<JSONApiResponse<SignUpResponse>>;
+    /**
+     * Given a user's email address and a connection, Auth0 will send a change password email.
+     *
+     * This endpoint only works for database connections.
+     *
+     * See: https://auth0.com/docs/api/authentication#change-password
+     *
+     * @example
+     * ```js
+     * var data = {
+     *   email: '{EMAIL}',
+     *   connection: 'Username-Password-Authentication'
+     * };
+     *
+     * await auth0.database.changePassword(data);
+     * ```
+     */
+    changePassword(bodyParameters: ChangePasswordRequest, initOverrides?: InitOverride): Promise<TextApiResponse>;
+}

package/dist/cjs/auth/database.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Database = void 0;
+const models_js_1 = require("../lib/models.js");
+const runtime_js_1 = require("../lib/runtime.js");
+const base_auth_api_js_1 = require("./base-auth-api.js");
+/**
+ * Sign-up and change-password for Database & Active Directory authentication services.
+ */
+class Database extends base_auth_api_js_1.BaseAuthAPI {
+    /**
+     * Given a user's credentials, and a connection, this endpoint will create a new user using active authentication.
+     *
+     * This endpoint only works for database connections.
+     *
+     * See: https://auth0.com/docs/api/authentication#signup
+     *
+     * @example
+     * ```js
+     * var data = {
+     *   email: '{EMAIL}',
+     *   password: '{PASSWORD}',
+     *   connection: 'Username-Password-Authentication'
+     * };
+     *
+     * await auth0.database.signUp(data);
+     * ```
+     */
+    async signUp(bodyParameters, initOverrides) {
+        // TODO: call this `validateRequiredParams` so we can use with bodyParameters in the auth api
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['email', 'password', 'connection']);
+        const response = await this.request({
+            path: '/dbconnections/signup',
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: { client_id: this.clientId, ...bodyParameters },
+        }, initOverrides);
+        return models_js_1.JSONApiResponse.fromResponse(response);
+    }
+    /**
+     * Given a user's email address and a connection, Auth0 will send a change password email.
+     *
+     * This endpoint only works for database connections.
+     *
+     * See: https://auth0.com/docs/api/authentication#change-password
+     *
+     * @example
+     * ```js
+     * var data = {
+     *   email: '{EMAIL}',
+     *   connection: 'Username-Password-Authentication'
+     * };
+     *
+     * await auth0.database.changePassword(data);
+     * ```
+     */
+    async changePassword(bodyParameters, initOverrides) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['email', 'connection']);
+        const response = await this.request({
+            path: '/dbconnections/change_password',
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: { client_id: this.clientId, ...bodyParameters },
+        }, initOverrides);
+        return models_js_1.TextApiResponse.fromResponse(response);
+    }
+}
+exports.Database = Database;
+//# sourceMappingURL=database.js.map

package/dist/cjs/auth/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../src/auth/database.ts"],"names":[],"mappings":";;;AAAA,gDAAkF;AAClF,kDAAkE;AAClE,yDAAiD;AAkHjD;;GAEG;AACH,MAAa,QAAS,SAAQ,8BAAW;IACvC;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,MAAM,CACV,cAA6B,EAC7B,aAA4B;QAE5B,6FAA6F;QAC7F,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QAEnF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,EAAE;SACtD,EACD,aAAa,CACd,CAAC;QAEF,OAAO,2BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,cAAc,CAClB,cAAqC,EACrC,aAA4B;QAE5B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,gCAAgC;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,EAAE;SACtD,EACD,aAAa,CACd,CAAC;QAEF,OAAO,2BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;CACF;AA7ED,4BA6EC"}

package/dist/cjs/auth/id-token-validator.d.ts

@@ -0,0 +1,18 @@
+import { AuthenticationClientOptions } from './base-auth-api.js';
+export declare class IdTokenValidatorError extends Error {
+}
+export interface IDTokenValidateOptions {
+    nonce?: string;
+    maxAge?: number;
+    organization?: string;
+}
+export declare class IDTokenValidator {
+    private jwks;
+    private alg;
+    private audience;
+    private issuer;
+    private clockTolerance;
+    private secret;
+    constructor({ domain, clientId, clientSecret, agent, headers, timeoutDuration, idTokenSigningAlg, clockTolerance, }: AuthenticationClientOptions);
+    validate(idToken: string, { nonce, maxAge, organization }?: IDTokenValidateOptions): Promise<void>;
+}